last executing test programs: 8m28.822525855s ago: executing program 3 (id=110): sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000000040)={0x28, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x3}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x278e18a297a8387c}, 0x24000802) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) r0 = setfsuid$auto(0xee00) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r1) read$auto_fragmentation_threshold_ops_(r1, &(0x7f00000000c0)=""/118, 0x76) getdents$auto(r1, &(0x7f0000000640)={0x2, 0x38, 0x9, "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"}, 0x80000) setreuid$auto(r0, 0x0) ioctl$auto_KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000100)={0x8, 0xee00, 0x4, 0x6}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x30, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x474d}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) sendmsg$auto_NBD_CMD_STATUS(r3, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x9}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x8800) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={"66afaed5f4fc7503e86f9c743021883a80e6c1092c9b9a89781743bbecb2d266", 0x800, 0x8, 0x10001, 0x0, 0x5, 0x0}) ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, &(0x7f0000000300)={"fc8ce515e4cd5240f866ca50d1f9d3689f2b7615f89e900dc367c9b9c047842f", 0x3ff, 0xf, 0x80000001, 0x9, 0x7, 0x0}) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91\vI\x1eRN8\x99\x88G\xd9\xec\x1epJ\"ds\x1cJr\xde:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18\x89\v\xea\x1b\x95\xaf\xee\xe69\x8d(<\xc7+\x83\xfcQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd3\x81Y\xa3Fp\v\xdc\xe2\xc3\xc3\xdbS\xdc', 0xfdef, 0x0) shmctl$auto_SHM_LOCK(0x3, 0xb, &(0x7f0000000440)={{0x9, r0, r2, 0x0, 0x800, 0x5c9, 0x5}, 0xf, 0x8000, 0xfd9, 0x0, @inferred=r6, @inferred=r7, 0x0, 0x0, &(0x7f00000001c0)="979e216a8ee9fa8d", &(0x7f0000000380)="89ff6ad752dadb6e983491c0d2e79c8ac139f4027de3d22dc61aae7f9c41683e406c277a46e53580b3cf1f6c864fbf5d4dcd1098b14253287c3bdc18ee265562a0743069ac9e6d974ce0f99fd3eccdc152873747744b6d0bf14a1df237f630251f1282fb4ec41c802226801b826cb779cdbd5ec5795952e60b0afda0c37f4394f3769149e37505977063e5b088d25b617bd05c989b6e7a"}) close_range$auto(0x2, 0x8000, 0x0) socket(0xa, 0x5, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fddbdf250300000004000800040003374b0008"], 0x20}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="db002cbd7000fbdbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) r8 = openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, &(0x7f0000000200), 0xc0400, 0x0) ioctl$auto_BINDER_CTL_ADD(r8, 0xc1086201, &(0x7f0000000240)={"afc2b1ca92f66d6202000000000000000b20551d19ecba0a4aba723aa74284078ca298c23c09ce2f013cf795fb146dbb52f4c2c591720393044153446ead73a6d0d4e1aaee41af1ec4c0bf648f4702619de28dab3e030000000000000076f0e4246fa36f846c02cc2402d0fc7f8b6f84841c7bd4816934fe9754c906cf66454d154b0a198706f27ab92651e1aa6856ee9bb79124f4712e6f117b13c3b8704e9ec9344c4b59ce49bbf943968bd8bb951575d5932d08a387b96e6679d40511096c5aa292672f18a47748befa7cc5b10cc721f41e62982ebb5543972030b39cc4dea1cc387fc6ebbf4e9c917507ad84e3315313192786fde94536de560500", 0x4, 0x1}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0xa, 0x3, 0x3b) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 8m28.535936533s ago: executing program 3 (id=111): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(0x0, 0x261c2, 0x84) r0 = userfaultfd$auto(0x1) statx$auto(r0, 0x0, 0x1000, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team0\x00'}) r2 = socket(0x2, 0x1, 0x106) ioctl$auto(0x3, 0x890b, 0x38) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/sound/ctl-led/speaker/card2/detach\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000000)='/sys/devices/virtual/sound/ctl-led/speaker/card2/detach\x00', 0x7fffffff) mmap$auto(0x400, 0x8, 0x400002, 0x13, r2, 0x4000308000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0xa001, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) r4 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x5, 0x6, 0x80000001, 0x14, r4, 0x9) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x5, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd08, 0xc, 0xc, 0x4, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0xa, 0x2, 0x3a) 8m28.222598161s ago: executing program 3 (id=113): r0 = memfd_secret$auto(0xffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8004) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) migrate_pages$auto(0x0, 0x7e6, 0x0, &(0x7f00000001c0)=0x7b) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f00000001c0)) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) io_pgetevents$auto(0x4, 0x8, 0xa31f, 0x0, 0x0, 0x0) read$auto(r2, 0x0, 0x1000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) migrate_pages$auto(0xffffffffffffffff, 0x5, 0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x95f4da0a, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x9, 0x6, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x3, 0xffffffffffffffff, 0x3, 0x8000000000000000, 0x2, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) sysfs$auto(0x2, 0x100000000000030, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000000)={0x10000, 0x5, 0x9b}) 8m26.777880362s ago: executing program 3 (id=117): sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000000040)={0x28, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x3}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x278e18a297a8387c}, 0x24000802) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) r0 = setfsuid$auto(0xee00) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r1) read$auto_fragmentation_threshold_ops_(r1, &(0x7f00000000c0)=""/118, 0x76) getdents$auto(r1, &(0x7f0000000640)={0x2, 0x38, 0x9, "2050210735c8e81fbd74709c28e9e788204d6d68f31113365d60adb6d5f2787408d636053c81258656104415c7e5675b2811bb3607f24ec3729602f147b659f7c86dba26295b37c2a8b84e459dd65e126d50e6ae7e8a7e95290c89000000007fffffffa9dbb77d3da87a5a87468f99ddbb771c4f5a593cb6bacbc0091c359626a7cf3f00000000000000005f85b103adbafc8ca66a5b2b82463d581f5aa735176e98fbe677307782e1bc366a6c71796d5501ba3a1df15f75cc98a6c9e02dcb02f17787120474a83926c73a3b8009c05547373854e9cd69709fa99b1d38ee2f12504482c4c48b807cfe03cbcd6e527acda0c119a7a65440ed7fa33dfc7b4eded5ed965c739c8b2bd42263519632719dc7f4bbf169cb83c873c85ff1b88ba9b5d1b325aea4abe6a285e1242104189b9d2bd0023f52247e57a5cb9fb868fe507afda2ab6c39dc1eb5c53f64e5d4d72bfe49903f37816a140cd84d672bda1d84e01e48d6699c9fc79e0de132658bd1f10aee159939f80073e8022a3a25aed1fe49efddd466aff70ae726ad9056b24d3ba67746ae12c62a6fab44aa678195bffce086297ebf2ca7270a3b49a83f600895b39580540bbc2b3ee6b5480f8830179b0264712b4ac304d658ec7fbbc67556b3b6b5339377838d43c26ae12c7f356601d831b980545590bfb4ed95ea23d87b23381ed1f32e927cf44d846c8642e7c2a2718c1afba834141879877655221f3329cbb4ac37d4c41db69d25911b63a7a0f6fc83dc043b7cf5889b2abd88280d"}, 0x80000) setreuid$auto(r0, 0x0) ioctl$auto_KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000100)={0x8, 0xee00, 0x4, 0x6}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x30, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x474d}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) sendmsg$auto_NBD_CMD_STATUS(r3, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x9}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x8800) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={"66afaed5f4fc7503e86f9c743021883a80e6c1092c9b9a89781743bbecb2d266", 0x800, 0x8, 0x10001, 0x0, 0x5, 0x0}) ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, &(0x7f0000000300)={"fc8ce515e4cd5240f866ca50d1f9d3689f2b7615f89e900dc367c9b9c047842f", 0x3ff, 0xf, 0x80000001, 0x9, 0x7, 0x0}) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91\vI\x1eRN8\x99\x88G\xd9\xec\x1epJ\"ds\x1cJr\xde:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18\x89\v\xea\x1b\x95\xaf\xee\xe69\x8d(<\xc7+\x83\xfcQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd3\x81Y\xa3Fp\v\xdc\xe2\xc3\xc3\xdbS\xdc', 0xfdef, 0x0) shmctl$auto_SHM_LOCK(0x3, 0xb, &(0x7f0000000440)={{0x9, r0, r2, 0x0, 0x800, 0x5c9, 0x5}, 0xf, 0x8000, 0xfd9, 0x0, @inferred=r6, @inferred=r7, 0x0, 0x0, &(0x7f00000001c0)="979e216a8ee9fa8d", &(0x7f0000000380)="89ff6ad752dadb6e983491c0d2e79c8ac139f4027de3d22dc61aae7f9c41683e406c277a46e53580b3cf1f6c864fbf5d4dcd1098b14253287c3bdc18ee265562a0743069ac9e6d974ce0f99fd3eccdc152873747744b6d0bf14a1df237f630251f1282fb4ec41c802226801b826cb779cdbd5ec5795952e60b0afda0c37f4394f3769149e37505977063e5b088d25b617bd05c989b6e7a"}) close_range$auto(0x2, 0x8000, 0x0) socket(0xa, 0x5, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fddbdf250300000004000800040003374b0008"], 0x20}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="db002cbd7000fbdbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) r8 = openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, &(0x7f0000000200), 0xc0400, 0x0) ioctl$auto_BINDER_CTL_ADD(r8, 0xc1086201, &(0x7f0000000240)={"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", 0x4, 0x1}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x565) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 8m26.632246737s ago: executing program 3 (id=119): socket(0x22, 0x3, 0x1) bind$auto(0x3, &(0x7f0000000040)=@can, 0x6a) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg$auto(r0, &(0x7f0000000280)={{&(0x7f00000000c0)="92dc7c21568c3bea4fba1e1cf0c41049731e41ec154e5ab1d9e641090c131cbd9970560cea857e01e6deeffa6b7f8fb33bcb0efaeb4dc5b7589395581168b895f4762ad2afec5352ee277d8d6099bdf9002a4d05f8", 0x4, &(0x7f0000000140)={&(0x7f0000000000)="40aab26616e02880c01c096fa4cb4470d50054beca6c0c21999a5b4f2e42ed657c0616", 0x100}, 0x7, &(0x7f0000000180)="dfb3bb03971853544a28ca2bdcc58d0209490474fb5c83aa1b1f713c8d3efba5348acc9c94c9c54ebebac16f315100222d95827b5c8c968374b4dd0eb24b399f6e13d35bc1ba3043a2c2ed76e676ac7226d4baee36a200073b9f631313f66e3d089391206c0eeb418abc96afdbede5f1d851f67ba66b680954705334907350a5bb9d88d752e8aa534c319655e23cbf0cf31502dddcdd6fdb1dd0c7b9ef15e4a07ebda19f14488b324ed26e21d46444efecd96d36a70f66e8be5aff0d9d6799b92577c9606d951f73843b60a57189c88d041e7a18cb770a07a5e2e132dc2f396f475012", 0xfff, 0xf632}, 0xf}, 0x2, 0x8, &(0x7f00000002c0)={0x1, 0xffffffffffff0001}) r1 = socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2}, 0x6a) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.4/usb5/5-0:1.0/ep_81/interval\x00', 0x20000, 0x0) read$auto(r4, 0x0, 0x20) sendto$auto(r1, 0x0, 0xc, 0xfffffff8, &(0x7f0000000440)=@can={0x1d, r3}, 0x36) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r6 = prctl$auto(0x3e, 0x1, 0xffffffffffffffff, 0x1, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x4d) fchmodat2$auto(r6, &(0x7f0000000280)=':,/file0/file0\x00', 0x4e, 0x400) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x106) socket(0xa, 0x1, 0x0) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_WIPHY(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, r7, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) sendmsg$auto_NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000000380)={&(0x7f0000000300), 0xc, &(0x7f0000000340)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="2ab954b7abb6a6ca49969acda7f63080b62bbfddd9309463a12ba2280e92b4ff54f0020fd9ea3ea36930471aeade907ddc79fc87446b8c482b6034746c1fba57853c28a7a529b83b171085dfa93a5f8231212910ce5664ad36ccf00506d809a328179c9df820c9cd9b7793789d6a937d34d04b200474bfc071c12b69b0e1f1a1d77500db1ab1faed24f9df156d915ba9e9ac1e638124bfc4db18", @ANYRES16=r7, @ANYBLOB="040025bd7000fbdbdf255d000000d200c70076ab367816d36c9ad49c007d5f150f6945947a327324dac656f28558fb01f43434445c92ddcef3b9d6e98c55297a0086003a8d7f1ec6f022be92852448dc133953736e3be232457cb60b6154ba01fad08e05f750afe38e3cbdd185118998bd9cbfc1394eaf7c25f046009ae71c52d55acd59fbb7f78679b20890d216d15703366e9f7f1961282d09575cc53afd2c55bcf949e84794d80f878e990f6425b88fa9f17b836d9b324cfc8607af67daa4c3959aad851ad2e559cbdfb7aedb92390cb87e8316da683931cb66236d0f32bb000006004301090000000800a000a23f0000cf002501b84a4e4452cd7e408f7a91809c2928ad0ea338a520e4dfa9cb5c169d08d1747c3ea7dcf98d1c7302fbf247c9896f36571e39933f37472158125b830625be3263230c1a4f143f77586b76d761b80f74c1e808339250e91a184d40a6f4d3c94179d03cca6a85077e79591aad675b357709f42168b1326c43ff5da079c940d145034f817b4db78fc1bba60fbe6f17d1601b0a15402392e265eac843b2c63c033523c6816f814b9d2643cb948a7d54f858d20763b64b83ae4a7dc5b3ea64b69f22e6a1a30560de416da8fe3ea90004005f00f8002d80f2002780698b5d2513729f8ac748cc89bc7f67debe1caab12317d20640c4ca488f8cf96e7acb682f44db7cb3fa135c06429cbe42a9a6c7043814345693957a5e93887f22e9c64ff24a0613cf106407852ddd0f1e762b35df98246f37b8b471e2966bc3813858f4032d912a32c91e4c35e7db7a924ce722932575a24c237ec32d5528dee2bda51cbc140263da93114c7d559cefe68a94cad3d5f5259093c33ac7cf4ba5f49ec8c642d604001a80040045800400278004004e00d06db09a740fde69b7714d7e7ed982bd03994745dbdfb827b48ff99cde2d6a378d58581f0dfa44bb1758fa9868de774a91532f89704b8184bb00000800a500e7030000050018010f00000008006100ff0f0000"], 0x2dc}, 0x1, 0x0, 0x0, 0x200400c0}, 0x44010) shutdown$auto(0x200000003, 0x2) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) 8m25.374435298s ago: executing program 3 (id=129): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x10000000000048, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) r0 = setfsuid$auto(0xee00) r1 = setfsuid$auto(0xee01) setresuid$auto(r0, r1, r0) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x800000000012, 0x4, 0x80000001, 0x8}, 0x6f4) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2, 0x1, 0x106) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) select$auto(0x8, &(0x7f00000000c0)={[0xeeda, 0x7, 0x6, 0x9, 0x34, 0x1ff, 0x6, 0x4, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8e, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f00000001c0)={0x6, 0xcb}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 8m9.595372162s ago: executing program 32 (id=129): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x10000000000048, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) r0 = setfsuid$auto(0xee00) r1 = setfsuid$auto(0xee01) setresuid$auto(r0, r1, r0) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x800000000012, 0x4, 0x80000001, 0x8}, 0x6f4) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2, 0x1, 0x106) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) select$auto(0x8, &(0x7f00000000c0)={[0xeeda, 0x7, 0x6, 0x9, 0x34, 0x1ff, 0x6, 0x4, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8e, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f00000001c0)={0x6, 0xcb}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 6m54.808484399s ago: executing program 4 (id=520): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_severities_coverage_fops_severity(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto_severities_coverage_fops_severity(r0, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) munlock$auto(0xf, 0x6) gettid() r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume_offset\x00', 0xa081, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x0) r2 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) read$auto(r2, 0x0, 0x1) write$auto(0x3, 0x0, 0xffd8) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) ioctl$auto_PPPIOCSMRRU(r1, 0x4004743b, 0x0) ioperm$auto(0x3, 0x5, 0x149) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x7fffffff, 0x3ef) r4 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/30t\x00', 0x0, 0x0) getsockopt$auto_SO_RCVMARK(r4, 0x22, 0x4b, &(0x7f00000000c0)='\'@^%$\')(\x00', &(0x7f0000000140)=0x5) 6m49.617833351s ago: executing program 4 (id=537): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x20000000000, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000ffdbdf25050000000c00010002000000000000000c0001000400a3"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0xd0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) close_range$auto(0x2, 0x8, 0x0) (async) r1 = socket(0x5, 0x2, 0x103) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYRES16=r0, @ANYRES32=0x0, @ANYBLOB="0a000500000000000000000000001400000a000100000000000000000006000700010000000800020000000000000000", @ANYRESOCT=r1, @ANYRES64=r0], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x880) (async) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) socket(0x10, 0x2, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) (async, rerun: 32) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x6, 0x0) (async) r2 = socket(0x24, 0xa, 0x20000000) close_range$auto(0x2, 0x8, 0x0) (async) r3 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f00000003c0), r1) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'ip6_vti0\x00', 0x0}) (rerun: 32) r5 = socket(0x26, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r6, 0xfd}, 0x6a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'wg2\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_CAP_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280), 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1000260008000100"/18, @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000200030000000800020004000000"], 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x1) (async) r8 = socket(0xa, 0x808, 0x73) (async) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async) setsockopt$auto(0x3, 0x10000000084, 0x80, 0x0, 0x8) (async, rerun: 32) r9 = socketcall$auto(0xed76, &(0x7f0000000000)=0x100) (rerun: 32) read$auto_minstrel_ht_stat_fops_rc80211_minstrel_ht_debugfs(r9, &(0x7f0000000180)=""/215, 0xd7) (async) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) bpf$auto_BPF_LINK_CREATE(0x1c, &(0x7f0000000300)=@raw_tracepoint={0x0, r8, 0x0, 0x5}, 0x2) 6m49.217863022s ago: executing program 4 (id=540): openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f00000004c0), 0x101202, 0x0) ioctl$auto(0xffffffffffffffff, 0xab07, 0xffffffffffffffff) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.0/usb1/bDeviceProtocol\x00', 0x12bc00, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) semctl$auto(0x8, 0x806, 0x8, 0x46) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xc6c43, 0x0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/kvm/halt_poll_fail_hist\x00', 0xa2500, 0x0) read$auto_stat_fops_per_vm_kvm_main(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01002dbd0900fedbdf257e"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/o2cb/interface_revision\x00', 0x800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000140)=""/123, 0x7b) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kfence/parameters/sample_interval\x00', 0x102, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$auto_KSMBD_EVENT_STARTING_UP(r5, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000001540)={0x14, r6, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x10) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r6, 0x800, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x41) r7 = socket(0x22, 0x2, 0x24) getsockopt$auto(r7, 0x400003, 0x5, 0x0, 0x0) bind$auto(r7, 0x0, 0x6) setsockopt$auto_SO_PROTOCOL(r7, 0xfffffffb, 0x26, &(0x7f0000000240)='\x00', 0x3) connect$auto(0x3, &(0x7f00000000c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xeffd) 6m47.591232859s ago: executing program 4 (id=545): madvise$auto(0x0, 0x2000040080000004, 0xb) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) lseek$auto(r1, 0x0, 0x2) r2 = gettid() readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) tkill$auto(r2, 0x7) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_PEER_REMOVE(r0, &(0x7f00000110c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200909ac", @ANYRES16=r3, @ANYBLOB="030026bd7000fedbdf25140000000c00078008000200", @ANYRES32=0x0, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x20008105}, 0x40) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x601, 0x0) prctl$auto(0x3, 0x1, 0x0, 0x0, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x100, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = socket(0x2, 0x801, 0x6) setsockopt$auto(r5, 0x1, 0x12, 0x0, 0xa4) r6 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='\f\x00\x00>', @ANYRES16=r6, @ANYBLOB="01002dbd7000ffdbdf25020000000800010009000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x2000c800) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptya7\x00', 0x10400, 0x0) openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f00000089c0)='/sys/kernel/debug/netdevsim/netdevsim1/max_vfs\x00', 0x101000, 0x0) io_uring_setup$auto(0x7e1b, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffa]}, 0x0) ioctl$auto_SNDCTL_TMR_CONTINUE(r7, 0x5404, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) syslog$auto(0x3, 0x0, 0x5) 6m46.438534299s ago: executing program 4 (id=549): unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) ioctl$auto(0xffffffffffffffff, 0x540a, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r1, 0x0, 0xb4d3) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r2, 0x4, 0x7ff) ptrace$auto_PTRACE_SINGLESTEP(0x9, r2, 0xffff, 0x0) (async) write$auto(0x3, 0x0, 0xffd8) 6m46.293759344s ago: executing program 4 (id=551): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x734f, 0x36, 0x67f, 0x1ffdf, 0x7, 0x3, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0xb4, 0x9, 0x6, 0x4, 0x80, 0x4, 0x1cd7, 0x1000, 0x2000, 0x203, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0xe70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4]}, 0x1fe, 0xd) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) (async) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2, 0x200800, 0xffffffff, 0xfffffffb}, "0dd7fd004929347eeeccdf0732f77b1f6de0d6d51768a257a97ca5e9ca6310ea"}) ioctl$auto_SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000000)={0x8, 0x3, 0x4, 0xba44, 0x2, 0xc, "e000265b7222b141ecb9fb5793abe8fdffdbcd2c02d3c293fa98882f5336d79fc5b8202cb37f6b6d22c42432352deb58e78afdbae76900"}) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/tunl0/napi_defer_hard_irqs\x00', 0x28b42, 0x0) sendfile$auto(r1, r1, 0x0, 0x1ff) (async) sendfile$auto(r1, r1, 0x0, 0x1ff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PAUSE_GET(r2, 0x0, 0x4000840) (async) sendmsg$auto_ETHTOOL_MSG_PAUSE_GET(r2, 0x0, 0x4000840) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/blkio.bfq.time_recursive\x00', 0x40880, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000000c0)=""/255, 0xff) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = open(0x0, 0x22240, 0x155) setpriority$auto_PRIO_USER(0x2, 0x0, 0xfffff8b0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) connect$auto(0x4, 0x0, 0x10) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000000c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000000c0), 0xffffffffffffffff) r5 = ioctl$auto_NS_GET_MNTNS_ID(r4, 0x8008b705, &(0x7f0000000100)=0x9) sendmsg$auto_TIPC_NL_BEARER_GET(r5, &(0x7f00000002c0)={0x0, 0xfffffffffffffefc, 0x0, 0x1, 0x0, 0x0, 0x20048cc4}, 0x20008000) (async) sendmsg$auto_TIPC_NL_BEARER_GET(r5, &(0x7f00000002c0)={0x0, 0xfffffffffffffefc, 0x0, 0x1, 0x0, 0x0, 0x20048cc4}, 0x20008000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x13, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) socket(0x10, 0x2, 0x0) (async) r6 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r6, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) 6m30.683422051s ago: executing program 33 (id=551): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x734f, 0x36, 0x67f, 0x1ffdf, 0x7, 0x3, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0xb4, 0x9, 0x6, 0x4, 0x80, 0x4, 0x1cd7, 0x1000, 0x2000, 0x203, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0xe70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4]}, 0x1fe, 0xd) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) (async) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2, 0x200800, 0xffffffff, 0xfffffffb}, "0dd7fd004929347eeeccdf0732f77b1f6de0d6d51768a257a97ca5e9ca6310ea"}) ioctl$auto_SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000000)={0x8, 0x3, 0x4, 0xba44, 0x2, 0xc, "e000265b7222b141ecb9fb5793abe8fdffdbcd2c02d3c293fa98882f5336d79fc5b8202cb37f6b6d22c42432352deb58e78afdbae76900"}) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/tunl0/napi_defer_hard_irqs\x00', 0x28b42, 0x0) sendfile$auto(r1, r1, 0x0, 0x1ff) (async) sendfile$auto(r1, r1, 0x0, 0x1ff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PAUSE_GET(r2, 0x0, 0x4000840) (async) sendmsg$auto_ETHTOOL_MSG_PAUSE_GET(r2, 0x0, 0x4000840) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/blkio.bfq.time_recursive\x00', 0x40880, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000000c0)=""/255, 0xff) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = open(0x0, 0x22240, 0x155) setpriority$auto_PRIO_USER(0x2, 0x0, 0xfffff8b0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) connect$auto(0x4, 0x0, 0x10) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000000c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000000c0), 0xffffffffffffffff) r5 = ioctl$auto_NS_GET_MNTNS_ID(r4, 0x8008b705, &(0x7f0000000100)=0x9) sendmsg$auto_TIPC_NL_BEARER_GET(r5, &(0x7f00000002c0)={0x0, 0xfffffffffffffefc, 0x0, 0x1, 0x0, 0x0, 0x20048cc4}, 0x20008000) (async) sendmsg$auto_TIPC_NL_BEARER_GET(r5, &(0x7f00000002c0)={0x0, 0xfffffffffffffefc, 0x0, 0x1, 0x0, 0x0, 0x20048cc4}, 0x20008000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x13, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) socket(0x10, 0x2, 0x0) (async) r6 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r6, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) 1m24.854532109s ago: executing program 1 (id=1960): openat$auto_memtype_fops_memtype(0xffffffffffffff9c, 0x0, 0x595380, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000002b00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002ac0)={&(0x7f0000000340)=ANY=[@ANYBLOB="c0110000", @ANYRES16=0x0, @ANYBLOB="08002dbd7000fedbdf251500000008000e0005000000040028800c000600020000000000000008000d00faffffff8a111880313e4cec7d01c401f74d5c174b0cc8770fb0bd63371d9d854583a1268f3ebc2bff1c4284031325ae6328ac4918d2c9018bdda16361f38ae0e374dfb131e7bcc29d5108e970877679b3f9f37df0a7504164cb975a3ae0fe33317f2424f0afdfdd1c2d09c7c7e98c75e0bcac873735659f91313352867f9cd0efbc57daff79ab3904761a4633cbbd1d3733b5a7d416443a9ad3b41f041ee4bba361e98d1063e3b4cf28afc563f9c2073098bf69f220323f5a9f9d9becf43cbb45067207d3c4ec992371e898b6e14e3edff9e7c8647d3e68c0fa6e1dfa7b2e47ffdc64f312dbd24c375f3d7f4ff3a85901997418c1999645863c15336d0dc76c069e8eb03b8ab0440cf9e98386473b0cb4b21a86e09d0d199c8092213028695c44171348a2b57c858bb6b08715fbb719753537ded6261ef55dd2e8e3eaac253a41f8c6578549be874a067b68844cea106e2ed964ac2d3ab69c40a18b97f7fc146ebab46494f76a8dcc2839ba491008002f00", @ANYRES32=0x0, @ANYBLOB="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"], 0x11c0}, 0x1, 0x0, 0x0, 0x80c0}, 0x8000) r3 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) sendmsg$auto_NL802154_CMD_TRIGGER_SCAN(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000001600)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040029bd7000fbdbdf25230000000f0028800800e880040000800b29cb0008000d00ffffffff05000800ff00000005000f000a00000008000c000700000008001d00", @ANYRES32=r3, @ANYBLOB="0f7cecb6484da6495954e5b161587b91b0eefd7589fa76def45d3419a8ec256d21e6ed3698c5bd9669a262336ac29d1123b7c84fa755d52d1122120074ef13c5cf47824bb26a21f2d20545d0b2afce1eb7a1a8d029e7ef729692900b5100"/106], 0x4c}}, 0x10) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230) 1m23.896296781s ago: executing program 1 (id=1965): select$auto(0x7fff, &(0x7f0000000000)={[0x9, 0x5dad4f50, 0x6, 0x5, 0x1, 0xa34, 0x0, 0x3ca, 0x7, 0x0, 0x6, 0x8, 0x9, 0x6, 0x3, 0xd]}, &(0x7f0000000080)={[0x3, 0x7, 0xd7, 0x3, 0x7, 0x9, 0x1ff, 0x81, 0x3a50, 0x4291, 0x8, 0x10, 0x1, 0x2, 0x2, 0x9]}, &(0x7f0000000100)={[0x3, 0xfffffffffffffffd, 0x8000000000000001, 0x7, 0x60, 0x2, 0x6, 0x56f, 0x3, 0xfffffffffffffff7, 0x4, 0x3, 0xf0, 0x1, 0x10000]}, &(0x7f0000000180)={0x6}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0xba8) r1 = memfd_secret$auto(0x0) close_range$auto(r1, r0, 0x17) ftruncate$auto(0x3, 0x700) syz_clone(0x19b8c9d80, 0x0, 0x0, 0x0, 0x0, 0x0) 1m23.795146976s ago: executing program 1 (id=1967): mmap$auto(0x6, 0x2000d, 0x0, 0xebe, 0x404, 0x10008000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x752502, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/dummy_hcd.5/usb6/power/autosuspend_delay_ms\x00', 0x88b02, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = memfd_create$auto(0x0, 0x80000000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) sendmsg$auto_NL80211_CMD_SET_CQM(0xffffffffffffffff, 0x0, 0x8000) mmap$auto(0x0, 0xff, 0xce6, 0x11, 0x40000000000a5, 0x400000008000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0xa) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) r3 = socket(0x10, 0x2, 0x0) madvise$auto(0x5, 0x4, 0x3) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000c0", @ANYRESDEC=r1], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x20040041) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/advisor_target_scan_time\x00', 0x201, 0x0) write$auto(0x3, 0x0, 0xfdef) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1b000000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004812}, 0x4000800) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x4004) write$auto(r2, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) getpid() 1m23.595231421s ago: executing program 1 (id=1968): openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) r0 = socket(0x2, 0x1, 0x106) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000380)='\x00', 0x163fdb7e) socketcall$auto_SYS_ACCEPT4(0x12, &(0x7f00000000c0)=0x1) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), r2) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r2, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7002fcdbdf251bd60000180001801400300000000000000000000004cd5f850146361e01355cc1d75a63da562d5892aaaa23ec841fc5aeac16e88638d91aa34859213699f121d174a70645f8ae89049424b800000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000800) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000353fb3582020d2bfdadad9ad347d5c80b51f7660d7e6de30dc27f7cc39596fd69be7f304982e1552de8cc6ec1c789f78102e69d3d536998bd73b767de390f715bcca21792d4b98ed9598f627d379ea04ed59587235926b4caad6e0e90d1e487600ca294ef1bf032206f0b252ee7dac4578a09ba14167a98300a03417b2f83c96928f8082c512519bffa05091c1ea4d5dd96c69f23516a2d4c64dc13ec9250d5f26bd521c2d3c1cdab37a0aedff0d3741bd1ac1fc355e2597b9c3a9d5af1882546f7debdf91d19ab1efaeddc294baa766", @ANYRES8=r0, @ANYBLOB="01002dbd7000fedbdf257e005c17"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) readv$auto(0x3, &(0x7f0000000040)={0x0, 0x36a}, 0x6) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0xffffffffffffffff, 0x0, 0x6a) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020025bd7000fcdbdf250543ddff7620aedb0400000008000300", @ANYRES32=r6, @ANYBLOB="1400040076657468315f6d61637674617000000008001c00640200000500370000000000"], 0x48}, 0x1, 0x0, 0x0, 0x20048080}, 0x840) r7 = socket(0x1d, 0x3, 0x1) r8 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r9}, 0x6a) setsockopt$auto(r7, 0x65, 0x1, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r10 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_SET_MESH(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002cbd7000fadbdf250f00000008000300", @ANYRES32=r6, @ANYBLOB="05003000000000004c19237ad6d869ddd85832c8cd0ac5cf507a013acf9f1288286234e190f03f4c581769a1aad2a9e198ede295620465b77ae390f5d8ed148bea2d2ee5e3f54681949112a05699f40deda30ca294bad828d162d08deeed8f76ceea46636cd58975e4032790afe24dc977d7ae66a7e959848bded87aeada6b80e126aa485f90fa7234175f87a902edc46a23de257a6eb8d7e9a3076027f2b1cb54cb924a7d77b40d9a76542e99310cb4ffb1e3ec635e02d5fee01c42d9eeb4ba"], 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x140040e4) 1m22.498094471s ago: executing program 1 (id=1972): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/device_info\x00', 0x48041, 0x0) mprotect$auto(0x200000000000, 0x806121, 0x8) write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000140)="22edd92f", 0x4) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r1 = socket(0x2a, 0x2, 0x8101) close_range$auto(0xffffffffffffffff, r1, 0xb) socket(0x25, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty3\x00', 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) bind$auto(0xffffffffffffffff, &(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x3) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/memory_tiering/memory_tier4/nodelist\x00', 0x22100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000080)=""/247, 0xf7) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xa, 0x0, 0x0, &(0x7f0000000180)={[0x1ff, 0x990, 0xffffffffffffffff, 0x1, 0x948b, 0x4002a1, 0x95f4da0a, 0xfffffffffffffffe, 0x3, 0x62, 0x80000001, 0x6, 0x0, 0xc, 0x3, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000440)='/\x02\x00\x00\x00\x00\x02\x00\x00o1mp3\xe1L\x00\x18\xee\n\xa7\x17\xe4\xbd\xe8\xee\x02\xf6\x06F2\x8d\xc1\xfc\x88HP\x15Riw\xc6\xfc\xd7G\xaa\x8b\"g\x1b\xe7]u\r\xc3i\xf4\xef\xacM\xeeA|\xe5\v\xec\xcb\xe5\xfeQ?\vqq\xe7\xe9\xb1\xa7\x9dq\xa9\xcfDV\xec\x84\xc3*`\xc1\xe4\xfb\x88S\xd5\xd6\xc5\x0e\xb3e\xfe\xf0\xc1\xfe\x00\x00\x00\x00\x0e\xfc\x8ev\xfe/\x99PJ\xf0\xc4\x8b4\xa6E\x91+\x87\xf0d\x8fVV\xd6%S\x9a\t\xb1\xe0!\x89i_h\xd1Og$p\xb5\x84f\xae\x90]\x1e\xdc\x98>F\x9b\x1a\xbd\x9c2\x9e\xc3\x1c\x12dn\x9bK\x1c\xd8Dc\xf2T\xd2\x1f\x91\xab;\xa2\xff\xe6\xfe%\x0f\x96\x17\xfa&\xaf \xbfT\xfb\x11\xd3\xd6\xa8dh\xeb^\xf8\xbc\xe1\xcc\x85\xd7j%\xeb\xf2\xe0\x03\xdb\xa85:\xa3\xa9\n\x8c\xf7Y\xb9\xfbK\\\xdfe\xe0\xb75\xbf\x81-', 0x100000a3d9) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000000001, 0x7, 0x8, 0x1, 0x7ff, 0x3, 0x6, 0x6, 0x3, 0x62, 0x80000023, 0x7, 0xf197, 0xc, 0x2495dae0, 0x6]}, 0x0) r4 = setfsuid$auto(0xee00) r5 = setfsuid$auto(0xee01) setresuid$auto(r4, r5, r4) waitid$auto_P_PGID(0x2, 0x0, &(0x7f0000000580)={@siginfo_0_0={0x7, 0x8, 0xfff, @_rt={0x0, r5, @sival_ptr=&(0x7f0000000340)="1aadbdb51e9b968ec393b4b55e8acaa3cdea684a0476e5d9c1c42c6ac10d94cf9fbe892833805d287c7267e8fad0995bd3b4e16b3dc18856a42381c359eb4d6f2425a3c16b0c21ed84b2d2ec620e4be119efb1e833eedc05b0555aad434c957071431bd23ed3835ee9ac1dbcd9df49ccc5ff0af1b0d32bbe5733aaccb7479c2263a16a1d723c8c7a546ca58c988ff970ee5d1b750649225d7af4935e560d09a9b6d8b62a80caae342a9506d8c08926e9de49"}}}, 0x7, &(0x7f0000000600)={{0x3}, {0x3, 0x5}, 0x80, 0x7, 0x2, 0x8, 0xfff, 0x60, 0x2, 0x5, 0xfffffffffffffe00, 0x2, 0x4a9, 0x0, 0x7, 0x80}) write$auto_console_fops_tty_io(0xffffffffffffffff, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) unshare$auto(0x40000080) openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x101501, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20000002020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 1m22.202567506s ago: executing program 1 (id=1974): socket(0x2, 0x1, 0x106) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x4401, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x1) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) ioctl$auto_FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0xffffffffffffffff) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) socketcall$auto_SYS_ACCEPT4(0x12, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$auto_I2C_TENBIT(r0, 0x704, 0xfffffffffffffffd) unshare$auto(0x20000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/timer_source\x00', 0x8002, 0x0) write$auto(r2, 0x0, 0x200c) close_range$auto(0x2, 0xa, 0x0) sendmsg$auto_IPVS_CMD_GET_SERVICE(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000180)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x2004000d}, 0x0) socket(0x2, 0x2, 0x1) cachestat$auto(0xffffffffffffffff, &(0x7f00000000c0)={0x401, 0x428a}, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) ioctl$auto(r3, 0xc0104d08, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r4, &(0x7f00000001c0)='\x00\x00\x00\x00', 0x100000a3db) mremap$auto(0x4, 0x4000007, 0x3fd7, 0x0, 0x7fffffffffffffff) 1m7.080823714s ago: executing program 34 (id=1974): socket(0x2, 0x1, 0x106) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x4401, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x1) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) ioctl$auto_FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0xffffffffffffffff) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) socketcall$auto_SYS_ACCEPT4(0x12, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$auto_I2C_TENBIT(r0, 0x704, 0xfffffffffffffffd) unshare$auto(0x20000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/timer_source\x00', 0x8002, 0x0) write$auto(r2, 0x0, 0x200c) close_range$auto(0x2, 0xa, 0x0) sendmsg$auto_IPVS_CMD_GET_SERVICE(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000180)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x2004000d}, 0x0) socket(0x2, 0x2, 0x1) cachestat$auto(0xffffffffffffffff, &(0x7f00000000c0)={0x401, 0x428a}, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) ioctl$auto(r3, 0xc0104d08, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r4, &(0x7f00000001c0)='\x00\x00\x00\x00', 0x100000a3db) mremap$auto(0x4, 0x4000007, 0x3fd7, 0x0, 0x7fffffffffffffff) 1m7.038031034s ago: executing program 5 (id=2054): sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000000040)={0x28, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x3}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x278e18a297a8387c}, 0x24000802) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) r0 = setfsuid$auto(0xee00) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r1) read$auto_fragmentation_threshold_ops_(r1, &(0x7f00000000c0)=""/118, 0x76) getdents$auto(r1, &(0x7f0000000640)={0x2, 0x38, 0x9, "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"}, 0x80000) setreuid$auto(r0, 0x0) ioctl$auto_KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000100)={0x8, 0xee00, 0x4, 0x6}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x2c, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x474d}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) sendmsg$auto_NBD_CMD_STATUS(r3, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x9}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x8800) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={"66afaed5f4fc7503e86f9c743021883a80e6c1092c9b9a89781743bbecb2d266", 0x800, 0x8, 0x10001, 0x0, 0x5, 0x0}) ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, &(0x7f0000000300)={"fc8ce515e4cd5240f866ca50d1f9d3689f2b7615f89e900dc367c9b9c047842f", 0x3ff, 0xf, 0x80000001, 0x9, 0x7, 0x0}) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91\vI\x1eRN8\x99\x88G\xd9\xec\x1epJ\"ds\x1cJr\xde:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18\x89\v\xea\x1b\x95\xaf\xee\xe69\x8d(<\xc7+\x83\xfcQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd3\x81Y\xa3Fp\v\xdc\xe2\xc3\xc3\xdbS\xdc', 0xfdef, 0x0) shmctl$auto_SHM_LOCK(0x3, 0xb, &(0x7f0000000440)={{0x9, r0, r2, 0x0, 0x800, 0x5c9, 0x5}, 0xf, 0x8000, 0xfd9, 0x0, @inferred=r6, @inferred=r7, 0x0, 0x0, &(0x7f00000001c0)="979e216a8ee9fa8d", &(0x7f0000000380)="89ff6ad752dadb6e983491c0d2e79c8ac139f4027de3d22dc61aae7f9c41683e406c277a46e53580b3cf1f6c864fbf5d4dcd1098b14253287c3bdc18ee265562a0743069ac9e6d974ce0f99fd3eccdc152873747744b6d0bf14a1df237f630251f1282fb4ec41c802226801b826cb779cdbd5ec5795952e60b0afda0c37f4394f3769149e37505977063e5b088d25b617bd05c989b6e7a"}) close_range$auto(0x2, 0x8000, 0x0) socket(0xa, 0x5, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fddbdf250300000004000800040003374b0008"], 0x20}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="db002cbd7000fbdbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) r8 = openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, &(0x7f0000000200), 0xc0400, 0x0) ioctl$auto_BINDER_CTL_ADD(r8, 0xc1086201, &(0x7f0000000240)={"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", 0x4, 0x1}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0xa, 0x3, 0x3b) setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x565) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1m6.683163303s ago: executing program 5 (id=2055): mmap$auto(0x0, 0x400008, 0x36, 0x1009b72, 0x2, 0x8000) openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000100), 0x22000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000005c40)='/dev/nbd9\x00', 0x2000, 0x0) fadvise64$auto_POSIX_FADV_SEQUENTIAL(r1, 0x86, 0x8, 0x2) close_range$auto(0x2, 0x8000, 0x0) r2 = socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000180), r0) seccomp$auto_SECCOMP_SET_MODE_FILTER(0x1, 0x8, &(0x7f0000000080)="c20c6d955eba76314e") bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x16, 0x4, 0x80000001, 0x8}, 0x6f4) stat$auto(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x8001, 0xffffffffffff6134, 0x0, 0xee00, 0xee00, 0x0, 0x6, 0x2, 0x8, 0x8, 0x5, 0x10000, 0x6, 0x4a, 0x8, 0x3}) r7 = gettid() r8 = waitid$auto_P_PGID(0x2, r7, 0x0, 0x4, 0x0) clone$auto(0x6, 0x0, &(0x7f00000002c0)=0xe, &(0x7f0000000300)=0x1, 0x5) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000002b00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002b40)=ANY=[@ANYBLOB="e4150000", @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB='\b\x000\x00', @ANYRES32=r0, @ANYBLOB="005840080000008a01f38fec588a9845fc96915265620c61f8c669e7660ca1fae91ad9804797d133c48f895ff8e6f53886eb6e", @ANYRES32=r6, @ANYBLOB="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", @ANYRES32, @ANYBLOB="48014580410114800c00de000900000000000000e68446cddce70d4e2a50a6c7d965d3471c7b91bd681da02626c085e2a8b3f1fb57f873e3bbc32a2d17f99843278a5e24d2baafe3f96d22fe075d74570a4522bfb84f3dc09f0a9d77894a5fe88c7d9c993b6792de3dd4df9410cdf84f8cc8857fd410f86a5619c40b7b4079f31ec53de4332d9bd86ecdf85d333b14dcfa9285d002d1020e52351e22e9451695a303e8b88e2c24e01e8a532d8306b839f45a0c696757a70bca57f317cd90e8c8f1722aabd8a1eee86be0968793819a86c3bf95e58546262274566b05dd3b061fff0670d9015decbc9a53a23fd82956cc7bda3c186f99435293eb24cf9de044d86d53e7e8a15722226839aa812853f8bfd46257c1a8346dd8bfa5966b8ad324143931cd35454f499c708abec2c3c1dcbc01cfe2f518571e3d116262be6331e809b96a328af800000004001f8059ca39ef6e92f68ae66b65eee0a1fcfd59167950fe021b04325a288aecb1e6efb7fd88a259f5d09c4dab6c03e7763f1bcacfc64f8183af2ddfaf17cdb7c3389ca121da7868e24a04a75545aecd65d6dab84775850ed1fcbc2dc5f44aa3c6c2536d0f206565e3003d774dfdc87c03eaab81399d2c48f19c6fd0dd87dfc9b0260fcb1fa0d56b5b4493663fa9519ca1b323fab1856655fb4a64750f0a8a03f1ee3129203bc65d93f3bcdbed170c10f6b50bc6684a9435de72591848a30417a8c5bf34ccec40982c74c324e1efca3f847571dbbab7e52699b607310a230e34e460b988ffe6b7bdf2749827bf2a790b3430c8e4ecc9c51c3c4a34c7a49a2cc44ed5277e895e7dbc93282172c383f3f20869c79d690728da0c4bfc877bf8d9b25a46595128c70ebfd776fb1951247bf7c270e12f8659c78ab7a993c16dd02f18588eee8a242a4a650e0e64c86c350cfa0dead1566c6b7cbe13eb983b8d6e1ec03f480d985cbe3f6bad63c4b284601fb2f6add01fb78e17bc56f7a63260ee413cd9b0823f1a144bc53096b2b3ea7547f98096a48759fa72bc8b4ecaaf6548aa2eb452c9ffc1566441dfe9b5b82218e5581aa3b84b1c7d4c02ae711d49bbd164146d3910ae0be7d8b366468fe7b2f7bfbb09786931c2376b203981d89a29463140e32f344ee70f19bb724d2c7b7686d8e832a0732ee357db1bc993d7ffeec22745937451d86b6ef51df074f5c9b21ec160625278aa63dd73de37155595b77852b8dcce28c86a1b6ba604682f019f530a5188f89a1acea4c1bc017aec680b115230572210bfe43467385ad31ff33795de62b4402050f47303be22ecda7d2e92153c0761439b8f5bd90fb59ed203a17c4fc0bc3ca12411acbd4287b2961fda0e4cd098e665cea85ae80c8df345519f64d6b77cf57a52056a96cf745d7562cab72d0b311d38c661d163540690f520f4141510058f0a11754765353d9b177aad6dbbab1a6d10c76c81e23003ece96a47844d68ff19bb494b382fc950d5176d6f92c070e1194388d198a3c664cde818437be2d2f4062ae6d44d641406d6c33c860189c9d763c99369aab56e0e866ec416fbd31efa9e3bb92300a4d38f4a8c3e6db636692522874496a4769f53fb3a378482b8d62e4ea9e37f4f41045c0b9a3924ae87efb142819a008661b4309aa1ab92851c87612006fd88aa51a3828e9ac38d63592c37dbbea9af723096e6445e9e0122841ea6cfffaca2b736e65bb1254dfc7b2ea907158ec9eb206c95b883cbe74456060f407916eb2870e59fb620b4b221ce7c2f466a809f7c4fcfa4ddd925e297d7b23af50273a432de9077409fcc838f13d55458132766cfb5b31298024e9bdacc20b259eb8dc856833e3927a91f495988c127188158d55d97fd605f038801e3b78b410686a19d8343552e142f7d4d60eeaa9724be06ec3c388f44febb8fe6546b59a36d8fafe611b5ad63df2cd02a957b1041580b4c47a1fcb40b1a1f323f362c723fe28e534a7c02c4b0202b96647db6c29b06629d90f2990bb452888711c0fc96b98f257064f1dca22b470799906eb9caaffcb3f8726b7ec7421778584de24ec4bc7fb0852187225067ac3cd9151653db61ecce9769c70e5d3a4f8ab2c5a007cdb7a1a1305d6dacdc6d0fa4ebd7f896875d315139fb208fa84073d513ec470031316f66ba74127f0df290b8575474ad14b99c399d03000bee461613a36dffded49191fa3739128df73ac42e2129aa279cb898beba35223e90cb2d6dfbbeae303f3d1c93d35e40f36772bdd56553b910c2bc5f3f4c036fe7985cbf0a50726276feb0262fcf7b33a16dcce016353c54101774117d571b67f3e5b050c89617afe3e30f5a1354987fd1c504e0318ca1d1f79c5459261725e31fc8297d0843dadf6089b7a2304871de57ad118a15c50e124ac56d1d59b9da0ea74ab1b2b6ccb08b41d8c54e386d1c731051578da3b6c60418b8e9de07f51cc5fec2a363e6735e98ce2a09b096b117b90913ba46e9c4d67328f67ffa233b31e3cf610c08b1507d5c151ee87d384ec2a572322bcf0e99a050a12d690c2e1069e64215f437ef565976f9ccba899ce640ba37f249f73b619fe92e87dba71fc323597f23afbe9015657fb036dd32aea9e3a508de46ece2201d8c2b6086a79c3250ae1098444ce3b7fc2b6b4bb8bed2e47fe1ff5ed9fb8b8ddf8637cb57c34e959e31e7b406cf2eb2100974c271609e45ae9fa62d0d596f12f09f700afc91b3e9b2307c31250769336f595c38a3dafac39a68384edc59fa56a4c98af7ad75a81d85a96d9caccc1afc197a6cee33fdcc3fca90bb0a2add82e0612b9c8230d09a7f0e19271b6b76bfe2ecf276589b783252721e8aaee3cff94af0145a6a316c4d26a4b0c4bd6542cefa84d30ae285a46b882d0d85faa814a141be3727c51a9c76abba406cb449a3275b7cef145dad199150988c36aac13110056dac515bb9882005ad4e187241d3aa0102a6b6e5297cd77c31d035ec3254a9680efc060d682e6ca9c9724e48511c00ce681dbe5ccfed621045d0bb0229fda3372caa3f25e7f15cd5e48bcf4675ec9ff88dbe5ac95c51fb87a82c28227934f1575c37a62d5a2f1bd368ec2f725a7b542dc121dfad268f651129a697efeffb6cbdec801c1997e227fe328101940de7a96db91ac73a1edd44245026163a7cc20257502992e1ffb055e7a7be766b5bf2749990450eabdd432533fedfde2cfc9d0361b4e38fcbb1c18f573592e7b42cec13d42a519d120c62b5be05fb5dd5487b08dc0cce9877ffde5d4596d45737ac5ee052cd000fec135209931eca92c341ed5aee5f95a8fe3cb40fae16974eda0da8a46e9d3cd75b0b4f3a37beb762d2b82b9781752a9d35df4db80960003142f5e3a527c4241bef8ba17d2e4f3ba579175fb6a01e094a2768fdfeccf787e6b0391854fcae2676f9ae83d79d901c7d193db14d3fe1bb4536707c151ee0274fd8e0094a56d70d6e836009d9fe7970cb765e3c9b71baec816555c3c2b5bf393fdc3bd3b269e857cbd4d76ac7a7e032e0db90997489f3f0e51ffe6c72e35537da1c0aab751260c5ec03429df603874deb84c5ca056439004f0b3d912cd7637b11043366d073ba101c32a6ac8429c06ee0c40d2743b79db4484b87b57f3a6873980aa26277225679bccc75cb1e28d652df82142e3f427d6a8340bdaed218ac45e6fd3a01d047e0d6ed43766f0781cca04631a907f29583f8a708c75975dfe78375c71586251c547f0c22d94bd5e516e6fbd9579725645febe9368b014c376fbbf0ef1c3fbb32903266f840fa4d96582d32a8e14a1ec1a9ff812f82ce8985eca98ebfece8b24fe698a16fb348f947ee1614822d89715953dd1bd6b2ccb3a371c7b91c935e0b038f78495053b8d307857b3c68d9de0bdf14287cb3c63440ab32b07855c7309202474eb94270faf31b0f7e595451fb03d14906f346335d715fefb7bf46ff1af8c68618ae769ba2a2557efa6b00ffa023bcf3d629b415ceaab7aac203eeabb794fcd165ef6728cbdacf617ead14cda4b9c84ce95abc7ccab3c5e74cbe3a7588c8cf878c156183e2e2d1f88b71e29b3d62842a70a29f0506c63c13b454721dbddb1de6210ab46b7d177bdb4558be431e6332ebedf70c0137906cba6e1da73837e9f3646fd8fd8895946b02017f32dc762d1bc73931a3ad50a8632ea7083f5086b9bbfe805a8d7ebd06483d4e7c46eb8469277a83cd81bc6b5159481f590966d2b1367d6ecca6772ffb02df1640d07c49ff290cdaa0b24e5185ca8f6c2c76812ddbb9058b222b379ed1d1c8afc9b606156f73bd8d842abe8618d4425f563a5d9c51dadfb78a53500c5cead0bb2d1e839a8bb3b3077e04395d58628fbdd6a6d4b20a0b14bfab011fdc758ae98a9d9488204088ecb784eed39bae30073c9bb7c042b71a8e38ec9c5973cd3a13d2d084057aed01d0d79752f2b0ba454d098fa5486bb11d9547a2484b893087abf478629a607479d22f6d9169eab77fee734ffb20bb40baaca7b96cd71f6066be99f031d67779665ee8af95ac5bad40b1e8ffb933acbd0ef1b57da712b4d1750474d9b247431b3db3a58922e6f49cedcbb21591cd11a0bda687a5a7cc9151674043f9b0a08c36102267a458a8c4666bbecf055d0f377c905c73d2e1ac9ce8ddf8c1140ec09fef84b987bba4f9c124bd7a566fb59eb865550b5efd3772b8cd07eb57e183c4cff5a4b8fb8e3c2004b0cdb289d7c07d8e9e1a2cfc58d1bd0d65dedecb26b085df911f34917371365f88a73a62e065c41a2288d6a6f9f5e8c7b6beae6190ecb2c3140120817f1ff9cbd2bdf1d219d09efe41731a7f4d32f595063940b80a8f466b28a4f4befcb816f640db4aaee323192f5d46dec196965d44ba19fe9b881da0da848ca3066435368be547b37dd465ba9e4701f2734932788e2ca5cb23ca9bf69630e87e945482aed9f1e52959e7f66f2360025ebe59f49ffe707833247159af31438caa9e93a7de5dfd0bd65deb31e88a809b7ffa652ded3c2f686c3d02e2d43d5244ca8d167f315500168501016494795aee0514143a620009610cf69d5a3a08e0dfd8d9e0b9a3c4111626456147557506731384a2056c1b078fe3f259540a7db8aaf4ccaea72242d8f44a0a41a7dd609997aa56bcaa10073051570318e67a338ee0155ad1b87b019cf91e059bee88049ef3b8abd4cf2c55b5a2781ff19c6a29b1f47b988487904df795f6165edf4251773c649fc01b958b802a66e7436b4459b74afe62b06a310c74c1559953485f57f412c48fa2bda903c5f81a8401d9e0a8a018d88ac63be232d379af5bc91206a7b4c53021dca00bde619cd9a1bb8157e49c3231cc50c3de577e5eeb83209114f0ebef34630a6bc63fc3bca5c68fc1a962f0de832e9011889a7de1506cf6368e924b44f94735293303cb058a5eb348a8b0b70e938e36fb2fffeed51422886b6bdbc587667e80ac4bf42c525920f602d48c8528dbb7dc4acad386c55fe950698b870d151ec7ad5b430a20d0b55e180246cde5521e66fbb66b34c5aba7c7b9b79fdf889a3e1292437049088851ff885fbe7ea956ef47e8f4d4dc23672c50e06e2b0944def1d3694194f52bd5611cc6e4bed370abced711f67a1e33ba8c464c078566e18df0f8589832e8ca2223e686060c7358159443af9c887bc1b7cb33549fd7211cba9826bcbcd0e96c1331baea0f7e2f4ca9842cdaf3964cbaab4bbdc5d4b1b42a7bf4c862ad0799707cfa73a0c06b987c8ff6989940f6ab86773a7a2c4a60f163e352cd61089fb54048041b07edcdbf7bc9d84ec9e40224e8f45e7255236c09b216cced83d6f99f7721fa857b389caf677025fa255f09490002b04552de8c5427042240e4ca86fa3bf30261cb24a6decbd8a23546dfb14421a5d2b7c3ac7ca1bbea6633a05db67595d1a14522f3bf7fbf61731fcc3508825f2fcdb247ded5c4f2bcdb914d5410db6c075a85a4eaece3b439aaa07b8c846cea75e0a3c3a445576b1b018a8222feab6f8abea42dc73a1346f7e8c1b0d399cfe1e827bfd50f0aab6711c06813dcf23e1e39d6bcd0bfc9891597521cad4d09c87e622a90992c61f66cb14845476f7f167620938e290a2d68ff29dea43394b97c5bc6164ebcff1860ab411f99564244bca3a0fb3b530cf200093c6d1808443b732eefa4cd2e0e958185abebb4eed5c363c1c29619f3ad07093ce4e21cb1622d77fe63a41a178f28889f9bd42f65ec9ecd06a6c94007fb407c32ab33b2526d6403db8c0400478000000000"], 0x15e4}, 0x1, 0x0, 0x0, 0x80c0}, 0xc880) close_range$auto(0x2, 0x8, 0x0) r9 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) listxattrat$auto(r5, &(0x7f0000001940)='./file0\x00', 0x3, &(0x7f0000001980)='\x00', 0xd) ioctl$auto_KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r9) ioctl$auto_KVM_CREATE_VM(r3, 0xc048aeca, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/dev/kvm\x00', 0xc03d) 1m6.463609823s ago: executing program 5 (id=2056): r0 = bpf$auto(0x12, &(0x7f00000002c0)=@bpf_attr_1={0xffffffffffffffff, 0x0, @value=0x101, 0x9}, 0x80) r1 = socketpair$auto(0x7, 0x2000005, 0x4, &(0x7f0000000b00)=0x3) pkey_free$auto(0x17) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) r4 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000140), r2) sendmsg$auto_IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r4, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50804}, 0x0) read$auto(r3, 0x0, 0x20) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) r7 = socket(0x2a, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'team0\x00'}) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x18b940, 0x0) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vidtv.0/i2c-0/0-0060/uevent\x00', 0xac00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r8, &(0x7f0000000b40)=""/4125, 0x101d) r9 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/xfs/panic_mask\x00', 0xa0202, 0x0) sendfile$auto(r9, r9, 0x0, 0x7fffe000) ioctl$auto(r9, 0x541b, 0xffffffffffffffff) sendfile$auto(r6, r6, 0x0, 0x2) settimeofday$auto(0x0, 0x0) r10 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) landlock_add_rule$auto(r2, 0x1, 0x0, 0x0) read$auto(r10, 0x0, 0xd40) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) msgrcv$auto(0x8001, 0x0, 0x5, 0x1, 0x4000b4) 1m5.896571229s ago: executing program 5 (id=2059): openat$auto_memtype_fops_memtype(0xffffffffffffff9c, 0x0, 0x595380, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, 0x0, 0x8000) sendmsg$auto_NL802154_CMD_TRIGGER_SCAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={0x0, 0x4c}}, 0x10) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230) prctl$auto(0x4402, 0x8000, 0x0, 0xffff, 0x0) bpf$auto_BPF_PROG_LOAD(0x5, &(0x7f0000000440)=@bpf_attr_0={0x9a, 0x4, 0x2, 0x3, 0x7eb, r0, 0x5, "e03f43000b26d5ea743998fb57339a75", 0x0, r1, 0x9, 0x3, 0x6, 0xfffffffffffffff3, r1, r1}, 0x7ff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5c5fd097d751f33e}, 0x80) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) write$auto(0x3, 0x0, 0xfffffdef) close_range$auto(0x0, 0xfffffffffffff000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_setup$auto(0x9, &(0x7f0000000080)={0x7fffffff, 0xd, 0xc000, 0x7f, 0x7, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0x5, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x10000}, {0x5, 0x1, 0x21bb800, 0x5, 0x6e, 0x2, 0x1, 0x8001, 0x100002000}}) 1m3.024681086s ago: executing program 5 (id=2062): mmap$auto(0x0, 0x400008, 0x400000000000004, 0x7ff, 0xffffffffffffffff, 0x0) preadv$auto(0x40000000000003, 0x0, 0x3, 0xe27c, 0x8) listen$auto(0x3, 0x81) ioctl$auto(0x3, 0x894b, 0x38) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) r0 = socket(0x29, 0x2, 0x0) r1 = open_tree_attr$auto(0xffffffffffffffff, 0x0, 0x39a, &(0x7f0000000100)={0x3, 0x2, 0x7fff, @inferred=r0}, 0x200) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec20\x00', 0x101000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x61, 0x100001000000003, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1000008, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) ioctl$auto_TCSBRKP2(r2, 0x5425, 0x0) r3 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r3, 0xfffffff7effffd04, 0x0) ioctl$auto_userfaultfd_dev_fops_userfaultfd(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) munmap$auto(0xffffffffdffffffa, 0x200fffffffb) r4 = socket(0xa, 0x801, 0x106) connect$auto(0x3, &(0x7f00000018c0)=@generic={0x5, "000f00000000f3fefff9c300"}, 0x55) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000000000)="6f4eb8e11b3d867449", 0x9) close_range$auto(r4, r4, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x169780, 0x0) 1m2.173945602s ago: executing program 5 (id=2063): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{@inferred=0x0, 0x1, 0x1, 0x81, "313bf5eb195a060000002af9ffb683dba3931f33828bbfba40f03510bf6b7fe5e2f94ba460d57d448667798d"}, 0xef, 0x5, 0x4, @inferred=0x0, @enumerated={0xffff, 0x1000, "f9bfcacb7f857e653e80b3fb85fb9e8dbc2b58c2b3bf7abfd58f2697242f035b71ff753f93ed56b3337470cac1aae7ac2b05e287daa73ede2010e0eeb3f9dddc", 0x6, 0x10001}, "7a9fc199a16a2311eacf2fc7ae1d8778dc618090334fdd73340238d21000debe0eda71bdd709254592b67f9cb5adb17884a16f7ce8cbce0bb32791702b8d7c2d"}) r3 = bpf$auto(0x4, &(0x7f0000000840)=@link_detach={r0}, 0x0) r5 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r5, &(0x7f00000001c0)={{0x0, 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x12}, 0x5, 0x0, 0x5, 0xe}, 0x5}, 0x2, 0x100) r6 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=0x0, @ANYRES8=r3, @ANYRESOCT, @ANYRES32=0x0, @ANYRES64=r1, @ANYBLOB="116469e0cf617d72ae6b76daa50a9e36ee2a8fab7fa72266c87bf6b0a7087261bded", @ANYRES8=r5, @ANYRESOCT=r6, @ANYRESOCT, @ANYRESOCT, @ANYRES8=r5, @ANYRES64=r7, @ANYRES16], 0xb4}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000054) write$auto(r5, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x5) write$auto(r3, &(0x7f0000000600)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cO!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:\x10\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xa02[=n*\a\vC\v\xe5\x1c*\xed`\xfd\x15\x88\x0f\x05\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xb8\xc8\xe9u\x9f\xdeK\xa5L/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\xcf\x90\vE\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\bD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\b\x00\x00\x00\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9c\x03\x00\x00\x00\x00', 0x1098c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x15) unshare$auto(0x40000080) mmap$auto(0x8, 0x2000d, 0x7, 0xffffffffffffffff, r4, 0x10008003) r8 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r8, &(0x7f0000001bc0)="51426572911c17e9dd66bf94ea32689283bb895dbc0a97721ed6e250c974356905898b7d48acecddf280cf6dd4ba18c1aa3928071c6585025ceab0e2f34f37ddec138ea587fc4def825608b0ab2a6ecac42062bd3c58ba606307b7471b20a40ffa168b91dde6727571c4ec94bfbde1df90ccb265ffda374c98ffb1ee22069af38a3f200532dbbe5e98f4455170e9a137517b9b7b8840359940ab00f37125c2bec0ac36606b6c69edb35967d723fb81a15faea2bd280d1581ad1ef597bb4dc09f6a5d53aaff1877b77c4e425761dc09d34498c1fce72c0ba1041a99b8748a37597b9567cda1de2cbf6962798e5ee11bf7cb2c70a9502f33c43b8e5dc54de743a2e24cb94c22d669b434888a7ce4cb16cd77b324258e07af32adc0cb38f8c622085783f6804edc3913fb9e98c55713fa0bf8101ad0f6f43407ce4be0001d1bb201bec283ade79ab23484c1076e703864629ac9a6031533dc956f705f89f0e0ef7d3109e46859d1f2ad1b8cb3cfcedf868a3be101e8b9acd75e39e6a27a541aa9fe86ad3119b7049c3fad2a901222eb948cabb4b5c3e5ba6ffc02a15bf7d550b00ab0f3dd3002924f7bd0701269ae293c4cb231b9127d1f6b38dd6fbb3429905384eed7eed9330a9c5e732bdd510169d9ca3e420ea2102be3770a0ab598c037b8f01e8910cf8b0942aafb156ac90724cf552df158a7f59c26e62f3fcf32d860c2259cb1b3118a773ff3cfbaf9c5b068dade5cd7778f1ea98700629b62534735fef3071c30afa6ea26f7e651ec140936c07d9e90f1c9faef3e05376b1e121af6a6691616c10e19fd4f16b1858b44d99e597908cda0e8fa8c21d8b700987d7723a4b5a4ff3c371f2d1cb9fb2f054abc58727239ba67a173f1431083fedc7c4304488c13c75e4995a58ac9de085377356ddc5338aeb44e7f3d06f82a5e0c846159c881a0395a3dbf32a9f2530a520721431a752b13b01a89bdf2b38387b72e8a533936623ec396f6ef94ddfcca047bf20a6fe450a03dedb36a57355e2519ff579b5c63095f48407ece8a7c6c4f5b2582616f0a6bba059810c0a28355fb08dceec9e290026452c3135f8ad93f9617f22e590122d43f6fdc1ea0f9ec12c551b5127108443bb081f7a89660034ea4f3c4305108428cc91918dbb28c2a117f09609e40903b13055e92a727afa767b1f97df335ee729686c0113e4cc18aa50f4ad82b1d403cc6c11ac3bf63415560417d7d488df01b69c925ca3fce60ca7ac767fd11df61caf62f3ab67dad043faf1cc334903e0f419c2e97553ecaad5814bf097192e76e9a16bc5c9be932718aba32cd7dbcc6bc634a463c6f709cc81963b39442e710c14c7e107b0aeb7b6a0e3f3757860d10dd741863277c43ce4dcec49f4558959b08f59182baf4f250aa045fee383ceaec280817bf222dfbeeca8c1ec8473176326c1ffd49ea072b5f3c73f36865b6052a1595c1bb76cfe37f976848fbcb408381ddeff9c318a2e6bbfe6c18ef16531fec3c47874a5391238c0d6b0e033db3fce94127cc9c98a4211e5d873f7b4810846d96be2d6cac532fce0ddee737e4d1ddb65b8b2449984a897e4090449ed4fb4006fb9d133e51396d4664a3f0c395c5b24781f8389979ccb565c6461b66db7134d15cff5ae8f935a5bcb23caace2edd2b37a726575e3cb0528de05edd9f03e30feb617767b6a557280a0a288b52af44a1607b6063867e5c9d8d56c44968fd509b5983fa06e6b1eefb2f8cee0c1cb49b8b569cf13b77adbc22ce972cd718167ac571ee41a446d13931f849d5636c729996b36ec84171fde260a4e01e9770cf687591a79833ae6473c51e12c0faab96ef093e6178d485526dbf775c94324c76bd4af2652e9036b1cc0d3df05c9232ee6eef7c4f46a6cf8ad160ad087aba6928bf156bf3ade1d135a965c4a2b283485737da67fe99227f2fbfb3baa74d75fe29122adfd82fcb9325b7ea826a52559654e76d494a374d9535facfcd4ab248e388c516bb8a0dc151b1557e418fd7c625c67ab1c50d6f05b97ba15c55631aeea44b21131aa93ead176f7bfd1418856e38782f004f272738827a64bb695f6b6a08cff8d1917be52a8851bd2bfd57d08bb0660e2ffc23792a419c2e9b006e3b0ad05044d99b97391fd2cceb86cf26acebe089a861340b04fd01e1baa70583032a30ea2e605217b80f7ee16d7e28be43d12bb2b67937dd26a8aeb84fef2f2d52f75232a400e7b279dcfc01953b0c46203477a50b5853e8f7b14b2ba31db742504bca6ed95b18846706c9fd85bf2a3a2642029b9ff2828bf0f7cbd96109a237961be8fe5c62f0fcc04c994f123f4a22f048403eac9308cfd2f2e4350c72e9ef83416ce973d3aa90d281a0275886dd3858b5869784ae58e257aa5af6d373dcc9cf520e364be748833adbb10daa6f6a334b51d27529d86ea5ce874562f9f93da45d244224b936fced3b658abbe7aa1f0d502fffce823f528ab47ea3540722f144733666229ae08cfc7e61247742ea4e3c180938ae7c7b81c1ee975c831f79672e044cefc49894c2ab73bba2580ac476cc0e56b6748b8edbb37a3f8dda7ffad4ec07abce7c4d10fc32e40d5a9db37f7b1e3a6eabedbefa9dd8eef189b92363d3391d384af26b7d47958d3d82845c9b668da5bcbd64058dc9e1c6d903ab5d2aa049d197116a11309a1abe9e5b3f9e7f1c623242b1d8089bc369d145a7070e8a9bdf543dbffe899ff9366009a3b0424a634681b530dad9ef23f136a10c7287068e57f3c2de45adf0a105c328e0035b97168f4c17aa4610b2e6e1a6ba0b71c06417b7a9497be4a009b19d7162adfd4d7b6490faf3782a920281333ad09b848ab5f4d15534b8c4e43dc9604b0630f8d349b2c80a98fde04693c31cbed7d460edfc0138dcc5d3974e682bbd555ac19625bf6e0607d8803391ec9c2dc41fc4e8bceae4f53507137324dd02914a067d52a577b812ddac4a34765c26a98839b3edb6290abff0c75991d6f8c1bd7540f38a7f25fec2f3539f894c938e1f3cf0ff1e6994d6a6ecc457a482f045ba712a85e8e31afd49c8e3480dc1c36d56ab2eceac6e5a847455d8ef4e3d45cd463c421bd1bce2ca57dd88f0e7ab3446cdfa8cb3914c240936f1738af7009e9131b240b59af55d7e38307b91fc8f00410cfdcfacaa341607a801afa63640091eb00b860700ea882878a8d9838f5597b970366be7d167ddebfe3c9253b5dbf7f30a67ee4d87dccb3c723c20200aa5fc036caf12811b19ce49c81ce328d7b24587353ecb99bafd327e33303cf447b36800d1bed8ee10df527d55c0d5f7506fb11cb133", 0x930) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/midiC2D0\x00', 0x202003, 0x0) prctl$auto(0x3e, 0x1, r2, 0x1, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0xe, 0x0, 0x22) mmap$auto(0x0, 0x400008, 0xdf, 0x17, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x8008, 0x0) close_range$auto(0x2, 0x8, 0x0) clock_nanosleep$auto(0x2, 0x6, 0x0, 0x0) r9 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r9, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) fsopen$auto(&(0x7f0000000280)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x6) open(&(0x7f0000000040)='./cgroup\x00', 0x0, 0x122) 47.064338449s ago: executing program 35 (id=2063): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{@inferred=0x0, 0x1, 0x1, 0x81, "313bf5eb195a060000002af9ffb683dba3931f33828bbfba40f03510bf6b7fe5e2f94ba460d57d448667798d"}, 0xef, 0x5, 0x4, @inferred=0x0, @enumerated={0xffff, 0x1000, "f9bfcacb7f857e653e80b3fb85fb9e8dbc2b58c2b3bf7abfd58f2697242f035b71ff753f93ed56b3337470cac1aae7ac2b05e287daa73ede2010e0eeb3f9dddc", 0x6, 0x10001}, "7a9fc199a16a2311eacf2fc7ae1d8778dc618090334fdd73340238d21000debe0eda71bdd709254592b67f9cb5adb17884a16f7ce8cbce0bb32791702b8d7c2d"}) r3 = bpf$auto(0x4, &(0x7f0000000840)=@link_detach={r0}, 0x0) r5 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r5, &(0x7f00000001c0)={{0x0, 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x12}, 0x5, 0x0, 0x5, 0xe}, 0x5}, 0x2, 0x100) r6 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=0x0, @ANYRES8=r3, @ANYRESOCT, @ANYRES32=0x0, @ANYRES64=r1, @ANYBLOB="116469e0cf617d72ae6b76daa50a9e36ee2a8fab7fa72266c87bf6b0a7087261bded", @ANYRES8=r5, @ANYRESOCT=r6, @ANYRESOCT, @ANYRESOCT, @ANYRES8=r5, @ANYRES64=r7, @ANYRES16], 0xb4}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000054) write$auto(r5, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x5) write$auto(r3, &(0x7f0000000600)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cO!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:\x10\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xa02[=n*\a\vC\v\xe5\x1c*\xed`\xfd\x15\x88\x0f\x05\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xb8\xc8\xe9u\x9f\xdeK\xa5L/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\xcf\x90\vE\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\bD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\b\x00\x00\x00\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9c\x03\x00\x00\x00\x00', 0x1098c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x15) unshare$auto(0x40000080) mmap$auto(0x8, 0x2000d, 0x7, 0xffffffffffffffff, r4, 0x10008003) r8 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r8, &(0x7f0000001bc0)="51426572911c17e9dd66bf94ea32689283bb895dbc0a97721ed6e250c974356905898b7d48acecddf280cf6dd4ba18c1aa3928071c6585025ceab0e2f34f37ddec138ea587fc4def825608b0ab2a6ecac42062bd3c58ba606307b7471b20a40ffa168b91dde6727571c4ec94bfbde1df90ccb265ffda374c98ffb1ee22069af38a3f200532dbbe5e98f4455170e9a137517b9b7b8840359940ab00f37125c2bec0ac36606b6c69edb35967d723fb81a15faea2bd280d1581ad1ef597bb4dc09f6a5d53aaff1877b77c4e425761dc09d34498c1fce72c0ba1041a99b8748a37597b9567cda1de2cbf6962798e5ee11bf7cb2c70a9502f33c43b8e5dc54de743a2e24cb94c22d669b434888a7ce4cb16cd77b324258e07af32adc0cb38f8c622085783f6804edc3913fb9e98c55713fa0bf8101ad0f6f43407ce4be0001d1bb201bec283ade79ab23484c1076e703864629ac9a6031533dc956f705f89f0e0ef7d3109e46859d1f2ad1b8cb3cfcedf868a3be101e8b9acd75e39e6a27a541aa9fe86ad3119b7049c3fad2a901222eb948cabb4b5c3e5ba6ffc02a15bf7d550b00ab0f3dd3002924f7bd0701269ae293c4cb231b9127d1f6b38dd6fbb3429905384eed7eed9330a9c5e732bdd510169d9ca3e420ea2102be3770a0ab598c037b8f01e8910cf8b0942aafb156ac90724cf552df158a7f59c26e62f3fcf32d860c2259cb1b3118a773ff3cfbaf9c5b068dade5cd7778f1ea98700629b62534735fef3071c30afa6ea26f7e651ec140936c07d9e90f1c9faef3e05376b1e121af6a6691616c10e19fd4f16b1858b44d99e597908cda0e8fa8c21d8b700987d7723a4b5a4ff3c371f2d1cb9fb2f054abc58727239ba67a173f1431083fedc7c4304488c13c75e4995a58ac9de085377356ddc5338aeb44e7f3d06f82a5e0c846159c881a0395a3dbf32a9f2530a520721431a752b13b01a89bdf2b38387b72e8a533936623ec396f6ef94ddfcca047bf20a6fe450a03dedb36a57355e2519ff579b5c63095f48407ece8a7c6c4f5b2582616f0a6bba059810c0a28355fb08dceec9e290026452c3135f8ad93f9617f22e590122d43f6fdc1ea0f9ec12c551b5127108443bb081f7a89660034ea4f3c4305108428cc91918dbb28c2a117f09609e40903b13055e92a727afa767b1f97df335ee729686c0113e4cc18aa50f4ad82b1d403cc6c11ac3bf63415560417d7d488df01b69c925ca3fce60ca7ac767fd11df61caf62f3ab67dad043faf1cc334903e0f419c2e97553ecaad5814bf097192e76e9a16bc5c9be932718aba32cd7dbcc6bc634a463c6f709cc81963b39442e710c14c7e107b0aeb7b6a0e3f3757860d10dd741863277c43ce4dcec49f4558959b08f59182baf4f250aa045fee383ceaec280817bf222dfbeeca8c1ec8473176326c1ffd49ea072b5f3c73f36865b6052a1595c1bb76cfe37f976848fbcb408381ddeff9c318a2e6bbfe6c18ef16531fec3c47874a5391238c0d6b0e033db3fce94127cc9c98a4211e5d873f7b4810846d96be2d6cac532fce0ddee737e4d1ddb65b8b2449984a897e4090449ed4fb4006fb9d133e51396d4664a3f0c395c5b24781f8389979ccb565c6461b66db7134d15cff5ae8f935a5bcb23caace2edd2b37a726575e3cb0528de05edd9f03e30feb617767b6a557280a0a288b52af44a1607b6063867e5c9d8d56c44968fd509b5983fa06e6b1eefb2f8cee0c1cb49b8b569cf13b77adbc22ce972cd718167ac571ee41a446d13931f849d5636c729996b36ec84171fde260a4e01e9770cf687591a79833ae6473c51e12c0faab96ef093e6178d485526dbf775c94324c76bd4af2652e9036b1cc0d3df05c9232ee6eef7c4f46a6cf8ad160ad087aba6928bf156bf3ade1d135a965c4a2b283485737da67fe99227f2fbfb3baa74d75fe29122adfd82fcb9325b7ea826a52559654e76d494a374d9535facfcd4ab248e388c516bb8a0dc151b1557e418fd7c625c67ab1c50d6f05b97ba15c55631aeea44b21131aa93ead176f7bfd1418856e38782f004f272738827a64bb695f6b6a08cff8d1917be52a8851bd2bfd57d08bb0660e2ffc23792a419c2e9b006e3b0ad05044d99b97391fd2cceb86cf26acebe089a861340b04fd01e1baa70583032a30ea2e605217b80f7ee16d7e28be43d12bb2b67937dd26a8aeb84fef2f2d52f75232a400e7b279dcfc01953b0c46203477a50b5853e8f7b14b2ba31db742504bca6ed95b18846706c9fd85bf2a3a2642029b9ff2828bf0f7cbd96109a237961be8fe5c62f0fcc04c994f123f4a22f048403eac9308cfd2f2e4350c72e9ef83416ce973d3aa90d281a0275886dd3858b5869784ae58e257aa5af6d373dcc9cf520e364be748833adbb10daa6f6a334b51d27529d86ea5ce874562f9f93da45d244224b936fced3b658abbe7aa1f0d502fffce823f528ab47ea3540722f144733666229ae08cfc7e61247742ea4e3c180938ae7c7b81c1ee975c831f79672e044cefc49894c2ab73bba2580ac476cc0e56b6748b8edbb37a3f8dda7ffad4ec07abce7c4d10fc32e40d5a9db37f7b1e3a6eabedbefa9dd8eef189b92363d3391d384af26b7d47958d3d82845c9b668da5bcbd64058dc9e1c6d903ab5d2aa049d197116a11309a1abe9e5b3f9e7f1c623242b1d8089bc369d145a7070e8a9bdf543dbffe899ff9366009a3b0424a634681b530dad9ef23f136a10c7287068e57f3c2de45adf0a105c328e0035b97168f4c17aa4610b2e6e1a6ba0b71c06417b7a9497be4a009b19d7162adfd4d7b6490faf3782a920281333ad09b848ab5f4d15534b8c4e43dc9604b0630f8d349b2c80a98fde04693c31cbed7d460edfc0138dcc5d3974e682bbd555ac19625bf6e0607d8803391ec9c2dc41fc4e8bceae4f53507137324dd02914a067d52a577b812ddac4a34765c26a98839b3edb6290abff0c75991d6f8c1bd7540f38a7f25fec2f3539f894c938e1f3cf0ff1e6994d6a6ecc457a482f045ba712a85e8e31afd49c8e3480dc1c36d56ab2eceac6e5a847455d8ef4e3d45cd463c421bd1bce2ca57dd88f0e7ab3446cdfa8cb3914c240936f1738af7009e9131b240b59af55d7e38307b91fc8f00410cfdcfacaa341607a801afa63640091eb00b860700ea882878a8d9838f5597b970366be7d167ddebfe3c9253b5dbf7f30a67ee4d87dccb3c723c20200aa5fc036caf12811b19ce49c81ce328d7b24587353ecb99bafd327e33303cf447b36800d1bed8ee10df527d55c0d5f7506fb11cb133", 0x930) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/midiC2D0\x00', 0x202003, 0x0) prctl$auto(0x3e, 0x1, r2, 0x1, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0xe, 0x0, 0x22) mmap$auto(0x0, 0x400008, 0xdf, 0x17, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x8008, 0x0) close_range$auto(0x2, 0x8, 0x0) clock_nanosleep$auto(0x2, 0x6, 0x0, 0x0) r9 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r9, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) fsopen$auto(&(0x7f0000000280)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x6) open(&(0x7f0000000040)='./cgroup\x00', 0x0, 0x122) 46.780465738s ago: executing program 0 (id=2109): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/irq/2/name\x00', 0x800, 0x0) read$auto(r0, 0x0, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0xd, 0x1f, 0x940, 0x1ffde, 0x3, 0x6, 0x8000003, 0x9, 0x5, 0x0, 0x40004, 0xb0, 0x7, 0x200, 0x3, 0x205, 0x7, 0x0, 0x3ffff, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x8, 0x5, 0x8000004, 0x0, 0x100000000000000, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x80000, 0x0, 0x100000000, 0x0, 0x8000000000000001, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x2000000000000000]}, 0x203, 0x7d) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r1 = socket(0x10, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000000), r2) sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000480)={0x20, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {0x4, 0x0, 0x900}, [@IOAM6_ATTR_SC_DATA={0x4}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x9}]}, 0x20}, 0x1, 0x3000700, 0x0, 0x1}, 0x8010) sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x200, 0x70bd27, 0x25dfdbff, {}, [@IOAM6_ATTR_NS_ID={0x6, 0x1, 0xf}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x81}]}, 0x24}}, 0x4000000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS0\x00', 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="a57de44d7000fd8018000180140006801000748004004d80040003000400338004000380040002800000fbffffff00000000"], 0x38}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) ioctl$auto(r4, 0x542e, r4) 46.632119485s ago: executing program 0 (id=2111): openat$auto_memtype_fops_memtype(0xffffffffffffff9c, 0x0, 0x595380, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r3, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000002b00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002ac0)={&(0x7f0000000340)=ANY=[@ANYBLOB="c0110000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ae6f5a5a83168c8ab59a8d85f52d552698b9ca49a246ab091f5150ba1611196e82a36f68a6361e23eb015ed9a7707112c8ce7c425f82837dbc5693b6155ff85e3e5a13d48a9afce510621531bbc604402655bd30de03734a9050ca096303206cf2dd1acaecb77b75727a0fdadebe0cee4ff1fd11e832b0dd4e7740bd102761d3ec18356f3bc101a18f8b21e1c8a99ee7589d080e24782fd8ae0a368652dfdcddbcee2895a3e49d2d9861ae1ab76f398e2e8fa05f063a299000ccce59e1d451b8f71473f04b203c390cd792a68e05a3670f3b4ee8b2fbb357fe7f414d198ec36fd736bdff959ef321592983bdfbeb7098dd830f3dc973577c637efaabf2b67621559f2eb54916ccd363d1c13015c53e7bb1b055fb3a6542d531a2f41c26209c1aa0e988339d851500c5dd196efe8eac0bbea6fd201c978c92dfff2da8480a3106e5c94f6baca472ef354f52f8a28e3d290b2eb6f4a851a3b2e9940486e97bd342fe29835a28a56cdb5993b9955f860423b1f8621dd6b5ed86c465663e97e43bf758ae03d6f55b710b351211d00045e51b1855c7e76ead1b7884e46289c40ccb5bb013c45395f38483abffc81649004cba6a734df7001a81dfac2f5885d31f279d2c829ea6374a86fcd2614bb557630a6abdc75f4f03a90bec282a4ad903eec8940405a78b6d78b877acf72a280a3044b5c78ff462e81855899a167b264ee21fcfb37d33dadfcdccf72bfb6337953eb94bfcdf22a3d75ebeb889323b364c659820672ad377f8a83e4fc178b203b5e92a07cf053e3820110ab4ae587b1fd1c86ae6d0ec74445f5eba8dc4b5c2c467b67acf76c43ad81683438bde19e143d19dc7e7a2f96f0140e157697016dd40934510d7e0afbf6f62565530768d2d38a37ed755ddc7097c8b58595def6b9b846283e69ad1ff1f74e8bd2aed4e9494954ebc9c79d12eb4c046ac082e4c0f7f5e6fd56fe18c6cdac993bb4842b48902236e00407e6c3b61da5016c3cd776d64f2f79baa98e6d4fa459a36780b40aa95873c830dba93fc92a5db4a27ceeec023efc2415c63ec4b7b927aea75ccaf4573c615c186d0705a00b93a7b3c196ed140a4077e1e3efb1854e743cee96bec6d680e5d6d5632368cc8960a88a4deb4745bcf7331a9d5527870583c2ac7f63077de07e48c377474665ab4686c54e99402a8f847c8b344f66e412bf2eea4cbd7e5dc3de1c9ca8e291940ca35747a687ab0f96b237141272fad16356e8918b8beae7df291ac64ab7c2016c5e805f306cf5c8a023fde6313134339685cf1c4dc56b68749ff567d0b02281741821342190a517bce867958fa390784830cee7174bcf2e952dabe23f560221042186d0a10c6026fff96a1d56e1f61c166fd010f25ea4d235179bc0110d77db8353df2e57be13505069271951f8b944178c1f49fefb65d6e3f684726beedb15746ed2bfd3a1f4438f74ac1c04ee7b95a4c73a5ef89116eebc184b3ad77c3ce387b847050871224b8ee0a2fcea2e78ef0d200c850042eb71d66bb9b5cf3ae566638ec41306e829def977f9084629c7f969e6930fb494b7c1afe81e2de2f6a455060faa66cd8a5b6b3a9340dc52ec5be58fa1532549d0b510fb824aca37c5d7c13af55d5b3ec2fb757bb42522517ae310941ccb80a323fef6d94b7ee36de32e40ba44f2cde3820b61441d6c30c3fd069df9111f9d77cf220d4be5a65933a3e0aa44c6baee8e175fdd341bc4bd50036f467211af81dca7f2858c42f0d2f02a6c2e099bbdbc919a276a67caf69279d9539019ecf0ff105f0caf330f4e0062ab4d950def1922254affc09766db456a51c5c86c6277a97d704b3ff8139ff4ac3894993aa63367266f77661e25d2e4c934bbd14d2b2fc7b9131a8acf47218ea629e7a34cb1d27963ec551a7dfa818ff493e29e8e022620ddfb4f56405580561f4bd9d38d119a6496a1a8b21217ca021d947bf2c942ee41159450ec510168a3ffcba8d546282ba100811662182eacd81f6f4cdd54fda1ccbe3630ebe3b487ac79a7d09e572ad21a19f34e8e8b55c6b322c4d7410fe93f4f8b51efdf3f60ba1513559103414068c61512dec8cf7309b8cc3e8553f12d58366a790f2f064ee20f651204cb94f270dffec260a2b98a293204246e02b3d8b7fb820cf29bfa5d32c742ac6ac7b84b21229fc566b987aaa4ddb4031395d5dcc6306df47994fe33591aab7c72d9e9e34318a5dda73b296230e6d69244bb091ac735c5db31bc7db9f5f3e241104f351c498775cc737ae3e66083876f6dff2f5c0bd174c9c33900f26ced6ecfa9670d60b1f9c2d24ececafc6195349ae17eaab76082f5bd8054da5d52917e4a77f3ab1047f6c247efdfccf40e52d268aaa5f552bd2be3ebf2fcddd1e47c0304c5a06c2910a8b4d8153a63ecccddc641913a74fa2a96aec1b4ee66a973b9a9d729ed40aa4ffcc9d6cd2a62703d1cf16f4b10b49465a296ca33da4b0a4d417ea3ffb0495e8886f965ee7ae32b71437a5822a8d850731403fdc949ee287d872532751857b6969b8d9d6e46b9669df6c4594a53e8d7d898f1c1c2b2af3df3d871a4bd685c80bb5457cdd1ada0b2f0a91e0ac2f4fb89752fc0a863237e2a45211142c05e56b6c0100000000000000c7fcd35e13a2c361b69d6826ba68a21f6d33ec5047bee488e211c649a5a9fec47d73f248815d9750a2f7a0e0236e26af11dcdd9341c24de2e96e27d13ae8aad321bd63a2bb51edad80109dcc2af16fe82b48cba1bf767d7dc111838f660f75f51d90fe5a353b28249ee93f42e658ff432ec19a0151e5c1f5ec1384783c70620ab814e15c9e3303efb65811ab31e3bdb242cd89a448148d0457623bd3c4bf8e7d25ca0bb8154bdfb2b36cd3a51d23f6ac7faeb5ae689c3ba6a8d17427c449fb4dba05c0c7374f186f611fd7d6c9da7737bb14c656c8ba4419dedbbc08a8225b8e6b006f6f8be85b4c725cd56fcd7fc82c265bb22d657e76c6973e2214b2cbda75c49557f4584270eb24965c2893006ba4b9f1c380d99754d58ab2f4d4bf3412f0faad6526ada48b478ec2585f9889de8f6e353b20e71f91c9db00d11493ba91351c7b012843d26fc03f472242991588091245cf67960d168525ddd7d57b68587820a13fab93b4363a940eadb720763643cb098a94ca0c4648c1cc0e2b2f951f18977870b1ecfd5bca2547eb8ac5e2458c229dbc61974f38825bdad60fa80023a3df695834049e3f60c296216ba0a1ded53d551766bed7dce93d01ed264c5befc389e3c7c856b73fe41195ecc30e2ee137e857775e9c42f3173bff8ba97df0dd4807d208776112019e434b7ef9ad59c62fa556406a7420d1e4bc09bbbc1d0037dd63cbdedcbbeb86a807d61bb6b39552b2e818bca97ad4abdaa4fd6c41942a6a4a10fe8668bf6714de64a7cf1fffb2134f7714f83bac75b0408c0b9f733aa4b8e9214fe16a6fa0b7e4c5e587044b765fe34730a8060eae3fe54d3e1b7dda10594f06e6a3e20a596fcd238d03913e1e88c5ab0df18769773c194b5a5753601f3ab4b7be520bf1615de94062ad319a564431f5750bb17439df45394c19257370b6674a854078b384fdb893f9a7010117e94febaa0a18ab811b01724626887a1597fb663baf4da1e7fc7bd37c44d47f4b9f1e8523e519ae18ac2cf8960d293470399a4bcab416929f31aa704dabbc8c3aa220169176518cef1659017f1e43b93cd6ecfab10e55b653d384508fafd8df14acb68b18794779f6922f797bfedf00afe30cb8a8dff4f992430df97bd4361b0b62255fd7544e230380f2b921b078425a407f50e784832407c2239d617a6df203d0de44d37c47e8e6674f22e8fa39d025eb23789e2500487f9a637caa67af7d45b41241c9667d795f2ef9801762c3c6500e837210339f2cf4bfcbdca4b9f0dd3faea9e9f2de3a2b832a38ea117640ec2b8b61acf69e4e84e4fa1f8c5c8fb23bfb7ac8ac19edd686ca0a22956ace226a598f09f02a559ecde2bbaf0f20fd46feb0596205f0d07959e830be47e1a8736a9f633696f5d5d1160ae2d174e420d30c79fd5b38082b4c66ca228c84475c53bdb0dd81896fc67befcc4fd9ef23eabee5971213421218cc2d923d10853eb6fb33cfd8369a52e1d0feb9dba3c5663f0c0ee2e6cb6430077c36eda97f0d85245126f95469f7684fb56125a2c43d381a5dd1098ae6d59052f9a4f5eb7e2d581e986d2ae034aa23b038336f8f6e253d9fadce22d8d43c35489fd4f4593e61e9ebfbdae790c511c73226e48e3e93a14f376176d9a085976b4bdf15dd344bd77b18f4949528d0f8cb5c4edae367f01e7116c2b64b0fd29254fdacfdc3c9485da8d969c3944b80af50fcf72ff5972db099fc0c40f21e3b16e2b11609fc070967745e653964102057fcc2dbb6d27020f41342caafd058aca2a74a0bf64f1c1e8d0a9444c2e047e07880dfd06382b5852b485e6ba6ffc92c948871fc0bcdc21f15ab64d47c93784ff25fb9b42a0d108dc9123646d2ee5e5a7f6c8fe8abe5d33ad290737d487c32951946991c68971accb842b18bc91a6bfb6ebadba5777ea3435c7cd49aa7f68498e3e5084d77793c0ddc30fead1ae06b4d246a292ec59e08ea241d9f5db22f917c1b294132180253ba351f07063c0df09c661656296581f8b451c87abbb758f06c1cee6fe6d700d2ac52e90bf764746da37512453541328ad818aae6e8a26f8871b855452b982746f3c45756af78a78d4a16cd76575eef1745125cc35d4e75904b4982deb3d5d5d8acc357519d14e24e03ff91284606efbc819735006e55107c4f4af12c2e0615dc78ad404590be8b8d61ce4f06a9db861720544db2b7fbb0f0f381335554b8badde31c5baa152dde98691f6cb9a2e4e855f2363d7cd5aa0985532f50829aca7d59b75ba69cec7ba3b53ac165ad633ef51b61290c0061694ba4dac1eaa9a8f4506ec72e1a626bacbb3897b0b0139a8a88ff7ac4d864ce85507abe2ef469e30a69636f29312c82437d94c18398602edb980fd9de8646005ba60458eb1c777bcc29bf31cfae9a84459d2e80be169365d2552e2acbea5635d7981f9053ad45b4c4b058c878c67908c077abbdb9582a3a85d6882fdebf313e3f3db8557d3cb20495f190677d74d29cfdd40dfb972897bbe820ad54c4b7ebe7c6e4db195f4d6c0baef70d2d985aec4c7e27a2d14cf6efeff84e7384511703d9dc3f3add5ec67ffc410937b01d618ea5d536c6d3a540495f50bfc444577ac1e47a3effef66e247707454094a0579072ba503b527fb7a5c79e9e79ce6c2efea5ecdc2842dbaa13610e5f47a47aa8778a7603277386232e6b575b76f837392eedefe250a2af66a643da89b16c98dfa1f36bce3aaf92abedc15c8dea336ff9caf74ff7513ad081cb4c8c5f664c81b90120f1ac6a17312c7c1eefa706d1bada349417aca361166c7630bdf0e620b5bc997711542e543fb7ddc0b53cd9a7de618232b3852f3c7e7fa8a423cd890be4ee5c66e4b30da1e6bd36517858da6e12ff82f89f5ed412aea070f6ebcbacdff3dcfae505c3387512ca582ae3d38cf25d87e428fbc06985b26922287173e4138dca8c67c81698950abd41dddeb584f4a0de0bfdc1a66820f5583f31e34286b889ba818d5c7c841fe818e284e5f30d6a18006e75d3c2252ff1827a8628fc65f4a270780a8e95a24527dc14b1197fd15cf955c3f73575026f96bb7869e6f539a8cdf1ea81bbd978f2a96b00d4926fe8d4c070acfc9404137da4aad58a7922296ffdd9c892a18b4afd512b57ff3bde1578ed41bf17c5bbfa0625dbc6fb63f68379b350f0ff5fd"], 0x11c0}, 0x1, 0x0, 0x0, 0x80c0}, 0x8000) r4 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) sendmsg$auto_NL802154_CMD_TRIGGER_SCAN(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000001600)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040029bd7000fbdbdf25230000000f0028800800e880040000800b29cb0008000d00ffffffff05000800ff00000005000f000a00000008000c000700000008001d00", @ANYRES32=r4, @ANYBLOB="0f7cecb6484da6495954e5b161587b91b0eefd7589fa76def45d3419a8ec256d21e6ed3698c5bd9669a262336ac29d1123b7c84fa755d52d1122120074ef13c5cf47824bb26a21f2d20545d0b2afce1eb7a1a8d029e7ef729692900b5100"/106], 0x4c}}, 0x10) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230) r5 = prctl$auto(0x4402, 0x8000, 0x0, 0xffff, 0x0) mmap$auto(0x0, 0xc, 0x5, 0x16, r5, 0x6) bpf$auto_BPF_PROG_LOAD(0x5, &(0x7f0000000440)=@bpf_attr_0={0x9a, 0x4, 0x2, 0x3, 0x7eb, r1, 0x5, "e03f43000b26d5ea743998fb57339a75", 0x0, r2, 0x9, 0x3, 0x6, 0xfffffffffffffff3, r2, r2}, 0x7ff) syz_genetlink_get_family_id$auto_nl80211(0x0, r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_WIPHY(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5c5fd097d751f33e}, 0x80) socket(0x2, 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x20000800) close_range$auto(0x0, 0xfffffffffffff000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_setup$auto(0x9, &(0x7f0000000080)={0x7fffffff, 0xd, 0xc000, 0x7f, 0x7, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0x5, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x10000}, {0x5, 0x1, 0x21bb800, 0x5, 0x6e, 0x2, 0x1, 0x8001, 0x100002000}}) 45.722381799s ago: executing program 0 (id=2116): mmap$auto(0x0, 0x4, 0xdf, 0x80000000000eb1, 0x3, 0x0) sysfs$auto(0x2, 0x4, 0x0) r0 = socket(0xa, 0x5, 0x0) getsockopt$auto(r0, 0x84, 0x12, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socket(0x2, 0x2, 0x88) setsockopt$auto(r1, 0x88, 0x1, 0x0, 0x80000e) 45.59595943s ago: executing program 0 (id=2117): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/netfilter/nf_conntrack_log_invalid\x00', 0x101202, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/team0/accept_dad\x00', 0x202, 0x0) sendfile$auto(r0, r1, 0x0, 0x10000) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/event2\x00', 0x1, 0x0) ioctl$auto_EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0x2, 0x9]) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000000), r3) mmap$auto(0x1, 0x8002020009, 0x12, 0xeb1, r2, 0x8000) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) fcntl$auto_F_DUPFD(r5, 0x0, r2) read$auto(r6, 0x0, 0x20) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffffe}, 0x3) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/controlC0\x00', 0x80, 0x0) sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000040)={0x24, r4, 0x1, 0x70bd28, 0x25dfdbfb, {0x4, 0x0, 0x900}, [@IOAM6_ATTR_SC_ID={0x8, 0x4, 0x4}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x9}]}, 0x24}, 0x1, 0x3000700, 0x0, 0x1}, 0x8010) 45.423566462s ago: executing program 0 (id=2118): mmap$auto(0x4, 0x2000d, 0x4, 0xeb1, 0x404, 0xe136) r0 = openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, 0x0, 0x200600, 0x0) write$auto_lowpan_enable_fops_(r0, &(0x7f0000000100), 0x0) connect$auto(0x3, &(0x7f0000000080)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) ioctl$auto__ctl_fops_dm_ioctl(0xffffffffffffffff, 0xfffffff7effffd06, &(0x7f00000001c0)) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0xffffffffffffffff, 0x28000) close_range$auto(0x2, 0x8, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/ipc\x00') ioctl$auto(0x3, 0x40103e05, r1) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x24004141) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES8], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c001) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x6, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x3f00) r2 = openat$auto_output_bpc_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Virtual-1/output_bpc\x00', 0x101000, 0x0) lseek$auto(r2, 0x7fffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x8a801, 0x0) ioctl$auto_EVIOCGMASK(r3, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004}) r4 = socketcall$auto(0x8000, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r4) close_range$auto(0x2, 0x8, 0x0) 44.589987413s ago: executing program 0 (id=2124): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/pids.peak\x00', 0x8000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket(0x29, 0x2, 0x0) setsockopt$auto(r1, 0x119, 0x1, 0x0, 0x8) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d8) mmap$auto(0x0, 0x9644, 0xdf, 0x9b72, 0x2, 0x2d4a29c0) pivot_root$auto(0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000000, 0xe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) connect$auto(0x3, 0x0, 0x10) openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000000600), 0x104800, 0x0) (async) openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000000600), 0x104800, 0x0) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000100), 0x80840, 0x0) (async) r2 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000100), 0x80840, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), r0) (async) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), r0) shmctl$auto_SHM_INFO(0xb46, 0xe, &(0x7f00000002c0)={{0x4, 0x0, 0xee00, 0x4, 0x10001, 0x2, 0xbdf3}, 0x7, 0x39a7e6f3, 0x6, 0x7, @raw=0x586d482f, @inferred=0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000640)="67232662bba5a31cec3c230169be45727a63415549956f600601df5f381e17e6e1f42a13cdcaaf870ae883b1a62daf19db97798b38ff74171a1bdce05104003e202c20d26df90bc5b54721901e3d801657afc020c1313731d3c412169ea0b781e5cbaa1920485246bce8f7e9b1", &(0x7f0000000280)="670d96cb1fd1008b16ecc772cbdadebca57bb53f9b6e"}) (async) shmctl$auto_SHM_INFO(0xb46, 0xe, &(0x7f00000002c0)={{0x4, 0x0, 0xee00, 0x4, 0x10001, 0x2, 0xbdf3}, 0x7, 0x39a7e6f3, 0x6, 0x7, @raw=0x586d482f, @inferred=0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000640)="67232662bba5a31cec3c230169be45727a63415549956f600601df5f381e17e6e1f42a13cdcaaf870ae883b1a62daf19db97798b38ff74171a1bdce05104003e202c20d26df90bc5b54721901e3d801657afc020c1313731d3c412169ea0b781e5cbaa1920485246bce8f7e9b1", &(0x7f0000000280)="670d96cb1fd1008b16ecc772cbdadebca57bb53f9b6e"}) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x150, r3, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0x12d, 0x3, 0x0, 0x1, [@nested={0x53, 0x62, 0x0, 0x1, [@generic="de3c551b863bc06d4b3b4056b3297629dc9a13809620c109bee68471ca4a09f80a9c4bdd3b2ecdb3d16945fbeed4836cbf7c0ed676916c58dae0132d2963b7e641634d", @typed={0x8, 0xa8, 0x0, 0x0, @fd}, @nested={0x4, 0x116}]}, @generic="476af92944ce0cc30ce3352589afb182665f5a801f4ab3755faee5f44d061ab247c1e610128e354f86b44708a91c825a8c5a2c8e7ad686a15f462518301abc0bed1e7e9a5b48747aabed0e92a8a6e785ce49a1bf3e86cd61d3c0893a384d1596386e3b8813b4bf2c2429f5a77250e7a51d6351ff58002b52c262a194c0be9841d29809372a2604aad385c0bc989e1167b60debadbf6ff3adee30e32faf96756eba94de9dc98e2b4e8b4483a0352438e999095faf19457cae9c13d4f836bf5b0b063c5cfc90be8dd748622f8f56", @typed={0x8, 0x4f, 0x0, 0x0, @uid=r4}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x75, 0x0, 0x0, @ipv4=@remote}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x24000085}, 0x40088c1) lseek$auto(r2, 0x0, 0x6) readv$auto(r2, &(0x7f0000000a80)={0x0, 0x5b54}, 0x1) getsockopt$auto(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000040)='/dev/cec27\x00', 0x0) (async) getsockopt$auto(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000040)='/dev/cec27\x00', 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) (async) r5 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) msgctl$auto_MSG_STAT_ANY(0x3, 0xd, &(0x7f00000003c0)={{0x7fff, 0xee00, 0xffffffffffffffff, 0xffdf, 0xa8, 0x80, 0x9}, 0x0, &(0x7f0000000380)=0x2, 0x5, 0x1, 0x3, 0x0, 0x8, 0x5, 0xfffc, 0x8c2, @inferred=0xffffffffffffffff, @raw=0x1}) (async) msgctl$auto_MSG_STAT_ANY(0x3, 0xd, &(0x7f00000003c0)={{0x7fff, 0xee00, 0xffffffffffffffff, 0xffdf, 0xa8, 0x80, 0x9}, 0x0, &(0x7f0000000380)=0x2, 0x5, 0x1, 0x3, 0x0, 0x8, 0x5, 0xfffc, 0x8c2, @inferred=0xffffffffffffffff, @raw=0x1}) madvise$auto(0xf8e6, 0x5, 0xd8f) splice$auto(r5, &(0x7f00000001c0)=0x3df8, 0xffffffffffffffff, &(0x7f00000006c0)=0x5, 0x4, 0xe0000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x37, 0x1, 0x4, 0xffffffffffffffff, 0x3) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) 29.48682256s ago: executing program 36 (id=2124): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/pids.peak\x00', 0x8000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket(0x29, 0x2, 0x0) setsockopt$auto(r1, 0x119, 0x1, 0x0, 0x8) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d8) mmap$auto(0x0, 0x9644, 0xdf, 0x9b72, 0x2, 0x2d4a29c0) pivot_root$auto(0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000000, 0xe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) connect$auto(0x3, 0x0, 0x10) openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000000600), 0x104800, 0x0) (async) openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000000600), 0x104800, 0x0) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000100), 0x80840, 0x0) (async) r2 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000100), 0x80840, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), r0) (async) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), r0) shmctl$auto_SHM_INFO(0xb46, 0xe, &(0x7f00000002c0)={{0x4, 0x0, 0xee00, 0x4, 0x10001, 0x2, 0xbdf3}, 0x7, 0x39a7e6f3, 0x6, 0x7, @raw=0x586d482f, @inferred=0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000640)="67232662bba5a31cec3c230169be45727a63415549956f600601df5f381e17e6e1f42a13cdcaaf870ae883b1a62daf19db97798b38ff74171a1bdce05104003e202c20d26df90bc5b54721901e3d801657afc020c1313731d3c412169ea0b781e5cbaa1920485246bce8f7e9b1", &(0x7f0000000280)="670d96cb1fd1008b16ecc772cbdadebca57bb53f9b6e"}) (async) shmctl$auto_SHM_INFO(0xb46, 0xe, &(0x7f00000002c0)={{0x4, 0x0, 0xee00, 0x4, 0x10001, 0x2, 0xbdf3}, 0x7, 0x39a7e6f3, 0x6, 0x7, @raw=0x586d482f, @inferred=0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000640)="67232662bba5a31cec3c230169be45727a63415549956f600601df5f381e17e6e1f42a13cdcaaf870ae883b1a62daf19db97798b38ff74171a1bdce05104003e202c20d26df90bc5b54721901e3d801657afc020c1313731d3c412169ea0b781e5cbaa1920485246bce8f7e9b1", &(0x7f0000000280)="670d96cb1fd1008b16ecc772cbdadebca57bb53f9b6e"}) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x150, r3, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0x12d, 0x3, 0x0, 0x1, [@nested={0x53, 0x62, 0x0, 0x1, [@generic="de3c551b863bc06d4b3b4056b3297629dc9a13809620c109bee68471ca4a09f80a9c4bdd3b2ecdb3d16945fbeed4836cbf7c0ed676916c58dae0132d2963b7e641634d", @typed={0x8, 0xa8, 0x0, 0x0, @fd}, @nested={0x4, 0x116}]}, @generic="476af92944ce0cc30ce3352589afb182665f5a801f4ab3755faee5f44d061ab247c1e610128e354f86b44708a91c825a8c5a2c8e7ad686a15f462518301abc0bed1e7e9a5b48747aabed0e92a8a6e785ce49a1bf3e86cd61d3c0893a384d1596386e3b8813b4bf2c2429f5a77250e7a51d6351ff58002b52c262a194c0be9841d29809372a2604aad385c0bc989e1167b60debadbf6ff3adee30e32faf96756eba94de9dc98e2b4e8b4483a0352438e999095faf19457cae9c13d4f836bf5b0b063c5cfc90be8dd748622f8f56", @typed={0x8, 0x4f, 0x0, 0x0, @uid=r4}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x75, 0x0, 0x0, @ipv4=@remote}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x24000085}, 0x40088c1) lseek$auto(r2, 0x0, 0x6) readv$auto(r2, &(0x7f0000000a80)={0x0, 0x5b54}, 0x1) getsockopt$auto(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000040)='/dev/cec27\x00', 0x0) (async) getsockopt$auto(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000040)='/dev/cec27\x00', 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) (async) r5 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) msgctl$auto_MSG_STAT_ANY(0x3, 0xd, &(0x7f00000003c0)={{0x7fff, 0xee00, 0xffffffffffffffff, 0xffdf, 0xa8, 0x80, 0x9}, 0x0, &(0x7f0000000380)=0x2, 0x5, 0x1, 0x3, 0x0, 0x8, 0x5, 0xfffc, 0x8c2, @inferred=0xffffffffffffffff, @raw=0x1}) (async) msgctl$auto_MSG_STAT_ANY(0x3, 0xd, &(0x7f00000003c0)={{0x7fff, 0xee00, 0xffffffffffffffff, 0xffdf, 0xa8, 0x80, 0x9}, 0x0, &(0x7f0000000380)=0x2, 0x5, 0x1, 0x3, 0x0, 0x8, 0x5, 0xfffc, 0x8c2, @inferred=0xffffffffffffffff, @raw=0x1}) madvise$auto(0xf8e6, 0x5, 0xd8f) splice$auto(r5, &(0x7f00000001c0)=0x3df8, 0xffffffffffffffff, &(0x7f00000006c0)=0x5, 0x4, 0xe0000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x37, 0x1, 0x4, 0xffffffffffffffff, 0x3) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) 29.404636678s ago: executing program 6 (id=2185): openat$auto_memtype_fops_memtype(0xffffffffffffff9c, 0x0, 0x595380, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000002b00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002ac0)={0x0, 0x11c0}, 0x1, 0x0, 0x0, 0x80c0}, 0x8000) r3 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) sendmsg$auto_NL802154_CMD_TRIGGER_SCAN(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000001600)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040029bd7000fbdbdf25230000000f0028800800e880040000800b29cb0008000d00ffffffff05000800ff00000005000f000a00000008000c000700000008001d00", @ANYRES32=r3, @ANYBLOB="0f7cecb6484da6495954e5b161587b91b0eefd7589fa76def45d3419a8ec256d21e6ed3698c5bd9669a262336ac29d1123b7c84fa755d52d1122120074ef13c5cf47824bb26a21f2d20545d0b2afce1eb7a1a8d029e7ef729692900b5100"/106], 0x4c}}, 0x10) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230) 29.217334252s ago: executing program 7 (id=2187): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/dmi/id/product_name\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000080)=""/64, 0x40) ioctl$auto_BLKGETDISKSEQ(r0, 0x80081280, &(0x7f0000000480)=0x302) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4085}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0xf, 0x9, 0x63, 0x0, 0x0, 0x0, 0x0, 0x401, 0x1003, 0xfffffffffffffffd, 0x7ffffffb, 0x9, 0xffffffff7ffffffc, 0x8009, 0xb, 0x200000100106}) ioctl$auto_XFS_IOC_FREESP64(0xffffffffffffffff, 0x40305825, &(0x7f0000000240)={0xff, 0x1, 0x7, 0xba0, 0x1, 0xffffffffffffffff}) setgroups$auto(0xa1, &(0x7f0000000000)=0x8005ea) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x80001, 0x0) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) 28.840991577s ago: executing program 7 (id=2189): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/irq/2/name\x00', 0x800, 0x0) read$auto(r0, 0x0, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0xd, 0x1f, 0x940, 0x1ffde, 0x3, 0x6, 0x8000003, 0x9, 0x5, 0x0, 0x40004, 0xb0, 0x7, 0x200, 0x3, 0x205, 0x7, 0x0, 0x3ffff, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x8, 0x5, 0x8000004, 0x0, 0x100000000000000, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x80000, 0x0, 0x100000000, 0x0, 0x8000000000000001, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x2000000000000000]}, 0x203, 0x7d) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r1 = socket(0x10, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000000), r2) sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000480)={0x20, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {0x4, 0x0, 0x900}, [@IOAM6_ATTR_SC_DATA={0x4}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x9}]}, 0x20}, 0x1, 0x3000700, 0x0, 0x1}, 0x8010) sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x200, 0x70bd27, 0x25dfdbff, {}, [@IOAM6_ATTR_NS_ID={0x6, 0x1, 0xf}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x81}]}, 0x24}}, 0x4000000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS0\x00', 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="a57de44d7000fd8018000180140006801000748004004d80040003000400338004000380040002800000fbffffff00000000"], 0x38}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) ioctl$auto(r4, 0x542e, r4) 28.618956974s ago: executing program 7 (id=2190): r0 = socket(0xa, 0x1, 0x0) setsockopt$auto(r0, 0x29, 0x3c, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x110) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/sctp/rto_max\x00', 0x800, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r1, 0x0, 0x0) connect$auto(r1, &(0x7f0000000000)=@can, 0x127) keyctl$auto(0x14, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000040), r2) llistxattr$auto(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='\x00\xca&\x9fp\xd5\xda\x87\xc6\x18\xa9\x02\x17c\xe0:\xd8|\xd9\xb8\xd2\xce\xfcJ\xe3\xf0\x9c\x9e\xef\xa0\x9b\x00\x00\x00\x00\x00\xeb\xff\xff\xff\xd3Zr\xe5n\x9f\xd8(\x809\x03\xa2\xb8W^\\\xf7\xa8k\xc5\x10', 0x40000000000005) 28.360990988s ago: executing program 7 (id=2191): mmap$auto(0x0, 0x2000d, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x23, 0x0, 0x0) msgsnd$auto(0x0, 0x0, 0x8, 0x9) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x300, 0x0) r1 = socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'team_slave_0\x00', 0x0}) bpf$auto(0x5, &(0x7f0000000300)=@bpf_attr_3={0x6, 0x24, 0xf, 0x63, 0xa2a, 0x0, 0xffffffffffffffff, 0x80f0c8, 0x20, "38c1d5cbcb9f6b5e511f0cd8ed068f65", r4, 0x113e33f2, 0xffffffffffffffff, 0xe4, 0x6, 0x5, 0x6, 0x8, 0x0, 0x3, @attach_prog_fd, 0x6, 0xffff, 0x8, 0x4, 0xfffffffe}, 0x47) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2, 0xfd}, 0x6a) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/006/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000040)={0x20, 0x3, 0x1, 0x1ff, 0x1, 0x4, &(0x7f0000000080)}) read$auto(r0, 0x0, 0x1f40) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r6, &(0x7f00000000c0)={0x0, 0x7}, 0x3) migrate_pages$auto(0x0, 0xa, 0x0, 0x0) io_uring_register$auto_IORING_REGISTER_CLOCK(r1, 0x1d, &(0x7f0000000140)="de4acd1a057087efc5b8df449137c18646650bae7e908639e7c1bd148a5f34dfe13d3dd7cbef0b08f73c8da13654e6349853dca5ac96b99346f317a96010882d46ed2a34341456a8acfeeedea773bfcbd1b683744d98fd566672ef8173cdaab58ff89282ffadf3b6656e77cc1a2a0a4c8288ea08cfed56335da9ff2c64d1f7fbc533d422340fe268a746a7d24f8694aca36d1070427b661494d8d94b6a", 0x3) mmap$auto(0xfffffffffffffff7, 0x10, 0xe6, 0x16, r6, 0x800000000ed8) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) 28.25954046s ago: executing program 6 (id=2192): mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) socket(0xa, 0x3, 0x3a) r0 = socket(0x2c, 0x3, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) sendmsg$auto_TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0xc050) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) r1 = socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff5f5ffffff00"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) clock_settime$auto(0x14, &(0x7f0000000000)={0x9, 0x20000000000004}) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x7f, 0xffffffffffffffff, 0x0, 0x8, 0xfffffffffffffffe) msync$auto(0x0, 0x2000000005, 0x6) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0xa, 0x3, 0x3b) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x80100, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x5f0146, 0x0) r2 = socket(0x10, 0x3, 0x6) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYRES8=r1], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x48d0) close_range$auto(0x2, 0x8, 0x0) 27.853943226s ago: executing program 7 (id=2193): r0 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) connect$auto(0x3, &(0x7f0000000100)=@hci={0x1f, 0x2, 0x2}, 0x5) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) fsconfig$auto_SHMEM_HUGE_FORCE(r1, 0xffff, 0x0, 0x0, 0xfffffffffffffffe) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x40000, 0x0) pread64$auto(r2, &(0x7f0000000040)='/dev/tty0\x00', 0x3, 0x9) sendmsg$auto_TIPC_NL_KEY_FLUSH(0xffffffffffffffff, 0x0, 0x2437b59cbfe687a8) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) capget$auto(0x0, 0x0) setsockopt$auto_SO_TIMESTAMPNS_NEW(r0, 0xb6, 0x40, &(0x7f00000000c0)='$\x00', 0x3) socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x7, 0x4a}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x1, 0x2b, 0x0, 0x28) r3 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r3, 0x29, 0x3e, 0x0, 0x1ff) finit_module$auto(0x3, 0xfffffffffffffffe, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xbfffffffffff0006, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) setns$auto(0x0, 0xb) setsockopt$auto(0x3, 0x10000000084, 0x7c, 0x0, 0x8) 27.570758986s ago: executing program 7 (id=2194): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097d751f33e}, 0x80) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2040}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="000829bd00ffdbdf2514000000050008001800000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) futex$auto(0x0, 0x3, 0x2, 0x0, &(0x7f0000002440)=0x8, 0x71a8dce0) mmap$auto(0x0, 0x5, 0x4000000000e2, 0xeb1, 0xffffffffffffffff, 0x8000) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) read$auto_l2cap_debugfs_fops_(0xffffffffffffffff, 0x0, 0x0) utimensat$auto(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x80, 0x1}, 0x9) sendmsg$auto_IOAM6_CMD_DEL_SCHEMA(r1, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@IOAM6_ATTR_SC_ID={0x8, 0x4, 0x21}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000044) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x15, 0x3, 0x8000) connect$auto(0x3, 0x0, 0x81) mmap$auto(0x0, 0x7, 0x20000000df, 0x19, 0x40000000000a5, 0x5) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) pread64$auto(r5, 0x0, 0x6, 0x1ff) readv$auto(0x3, 0x0, 0x4) unshare$auto(0x40000080) r6 = open(0x0, 0x161342, 0x130) write$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffffff, 0x0, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/tty/ptybd/power/control\x00', 0x2062, 0x0) sendfile$auto(r7, r7, 0x0, 0x4) mmap$auto(0xf22, 0x6, 0xfd5, 0x1e, r6, 0x0) writev$auto(0x3, &(0x7f0000004100)={0x0, 0x2000000b}, 0x3ff) mmap$auto(0x0, 0x40000a, 0xdf, 0x9b74, 0x2, 0x8004) 26.60484232s ago: executing program 6 (id=2196): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) (async) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) (async) r0 = socket(0x29, 0x2, 0x0) (async) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'ip6tnl0\x00'}) socket(0x2, 0x1, 0x0) (async) statmount$auto(0x0, &(0x7f0000000180)={0x770, 0xbb40, 0x8, 0x4, 0x4005, 0x5, 0x3ffde, 0x400, 0x3, 0x9, 0x6, 0x6, 0x8000000004, 0x11ffffffffffb, 0xb2, 0x2, 0x6, 0x10, 0x80, 0x800000029f, 0x8000, 0x1, 0x1, 0x400202, 0x9, 0xbca7, 0x4, 0x0, 0x0, 0x0, 0x0, [0x2, 0x6, 0x0, 0x4, 0x8, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0xed3, 0x0, 0x0, 0xfffffffffffffc01, 0x7fffffff, 0x1, 0x0, 0x9, 0xac3, 0x40, 0x0, 0x8, 0x0, 0x0, 0x5, 0x8000000000000000, 0x0, 0x5, 0x0, 0x7ffffffb, 0x2, 0x0, 0x20000000000000, 0x0, 0x1000000000000200, 0x0, 0x400, 0x96, 0x1, 0x4, 0xe17, 0x0, 0x6]}, 0x1fe, 0x1) r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r2, 0xfffffffffffffd03, &(0x7f00000001c0)) (async) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffa]}, 0x0) write$auto(r1, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) (async) select$auto(0xa, 0x0, 0x0, &(0x7f0000000200)={[0x8001ff, 0x4, 0xd, 0x8fd6, 0x948d, 0x3, 0x80, 0x3, 0x6, 0x7ffffffffffffff8, 0x7, 0x2, 0xd, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) (async) mmap$auto(0x0, 0x400008, 0x7, 0x9b72, 0x2, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x80802, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/net/softnet_stat\x00', 0x1e9e02, 0x0) 25.559947779s ago: executing program 6 (id=2200): mmap$auto(0x8000, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), r1) sendmmsg$auto(r0, &(0x7f0000000340)={{&(0x7f0000000080)="7a13e884dd19810f99c0705e64dcbe751ac61aae8e7f4d9dc945a50ce11ae46ed31a63d91d05044a7f24b573b4938f01c711fc61357716231c93df04317712c7718ee492a39867f7fedb3bfc3a1cd9fc8b0848499ad7e80fc930c54f56813b116bec5d427c5171eccae4cd98802ce9640cb1663f85fb5483a02e346fd76cd857737d27e38f9546abfae6c0954bf393aa48b3c65c8baa2555740f7fd5ee716bc9b2bf1c1effa601a884870cb5f52a600b3f1ed97c16a1ca2a035d9aebe941caa5008db14dde751c03285580a046d76f69553a6dd7bbed68587dad5aebf958d6b4a661", 0x5, &(0x7f0000000280)={&(0x7f0000000180)="ff0df86f7e5f60c6debad28dd935fb9ce285701adaeccaa5dd41ae160c15893c044c9182c8d0166238e798aaf08f1d82a2e215898f49181b157951b08809fb1691709cd3445ab48d2a9408c88dec9e910d176a0f2a544f6b942f1a1c2fb01bad3f3932cd172dd1a143ed9b595a916537adf1bb708250f6cda187a6fb8ac0eaad82", 0x1f}, 0x3ff, &(0x7f00000002c0)="8282684ddf59b744c942672cddeb5064cec7ed145f9e1288412114604d75097bdcefd27c1ad70170e8aee140966ce2ae323f3fe3c968770f58dce4382f8d1a4cc1990aa7bc9d02", 0x2495, 0x2}, 0x6}, 0x200, 0x20) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getdents$auto(r3, 0x0, 0x400018) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram14\x00', 0x0, 0x0) ioperm$auto(0x3428, 0x80, 0x4) socket(0xa, 0x2, 0x0) openat$auto_fops_atomic_t_(0xffffffffffffff9c, 0x0, 0x82001, 0x0) io_uring_setup$auto(0x6, 0x0) mknod$auto(0x0, 0x1081, 0x3) creat$auto(0x0, 0x1000) creat$auto(0x0, 0x8d00) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x2a, 0xffffffffffffffff, 0x3) mmap$auto(0x9, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000080)=@rc={0x1f, @any, 0x2}, 0xfffe) io_uring_setup$auto(0x1, 0x0) setsockopt$auto(r4, 0x0, 0x2, 0x0, 0x3) write$auto(0x3, 0x0, 0x5c8) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0xa0602, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRESOCT=0x0, @ANYRES16=r2, @ANYRESOCT=r2], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) madvise$auto(0x0, 0xa, 0x15) 24.941219534s ago: executing program 6 (id=2202): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) (async) unshare$auto(0x40000080) socket(0xa, 0x5, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/netdevsim/netdevsim2/max_vfs\x00', 0x5a082, 0x0) write$auto(r1, 0x0, 0x1) (async) r2 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_UPD_TXSA(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="9c0000000080b2c831ad06634cd1d941ae3024e6e5e9ee8101a23d23a9be3bcfa1b5667d51045b5083e4cf96098bfbc4941d063f06cbafc2644f33c35aa90620bda39e4a0e1a8ca5d7c2422f5f0524a4c6bebb9f5753094f2a56b52342314a61069da29fde3cd605fc07863368f5a2eb709cb37e56f06538c67bbd6faf9e4fa772712a0ef24a708096d00f2aa3f3125b67c8e99d873a253983ced23cfaa3c1a222870747bf4430d60ac9b52c3dfdac51a7d752eb0e3372bcf3546f332e5e7083a54e7dc903f827e972120805cdb85868a9757fe1fb4bebc6f1a885", @ANYRES16=r2, @ANYBLOB="010029bd7000fcdbdf250600000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8002}, 0x8010) (async) ioctl$auto(0xffffffffffffffff, 0x540a, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) semctl$auto(0x80001ff, 0x804, 0x13, 0x4) (async) keyctl$auto(0x1, 0x7, 0x100, 0x8, 0x4) keyctl$auto(0x1, 0x7, 0x100, 0x8, 0x4) (async) socket(0x80000000000000a, 0x2, 0x0) (async) socket(0xa, 0x1, 0x9) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) (async) sysfs$auto(0x2, 0x2, 0x0) (async) lsm_list_modules$auto(0x0, 0x0, 0x0) (async) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x6c, 0x697c}, 0xed71390}, 0x9a6, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) futex_waitv$auto(0x0, 0x6, 0x5, &(0x7f0000000100)={0xa4, 0x4}, 0x9) 24.79505786s ago: executing program 2 (id=2203): openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f00000004c0), 0x101202, 0x0) ioctl$auto(0xffffffffffffffff, 0xab07, 0xffffffffffffffff) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.0/usb1/bDeviceProtocol\x00', 0x12bc00, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) semctl$auto(0x8, 0x806, 0x8, 0x46) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xc6c43, 0x0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/kvm/halt_poll_fail_hist\x00', 0xa2500, 0x0) read$auto_stat_fops_per_vm_kvm_main(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01002dbd0900fedbdf257e"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kfence/parameters/sample_interval\x00', 0x200483, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xeffd) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7) 23.799994773s ago: executing program 6 (id=2204): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) set_mempolicy$auto(0x6, 0x0, 0x21) (async, rerun: 32) unshare$auto(0x40000080) (async, rerun: 32) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async, rerun: 32) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0xee00, 0x9, 0x5, 0xb7, 0x5}, &(0x7f00000001c0)=0x6, &(0x7f0000000080)=0x1, 0x1, 0xfff, 0x3, 0x200000000007, 0x9, 0x24, 0x15, 0xf}) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) (async, rerun: 32) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) (async) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, 0x0, 0x5) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x40000) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd15/capability\x00', 0x129102, 0x0) r3 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/binderfs/binder0\x00', 0x102, 0x0) ioctl$auto_BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/012/001\x00', 0x20400, 0x0) (async) r4 = openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9482, 0x0) read$auto_state_fops_(r4, &(0x7f00000002c0)=""/63, 0x15) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x18, 0x401, 0x300000000000) (async, rerun: 64) keyctl$auto(0x2000000000000017, 0x3ff, 0x0, 0x0, 0x3) (async, rerun: 64) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae60, 0x10000000000402) (async) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyda\x00', 0x109401, 0x0) ioctl$auto(r5, 0x540a, 0x0) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) mmap$auto(0x8000000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 23.196301451s ago: executing program 2 (id=2205): sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000000040)={0x28, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x3}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x278e18a297a8387c}, 0x24000802) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) r0 = setfsuid$auto(0xee00) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r1) read$auto_fragmentation_threshold_ops_(r1, &(0x7f00000000c0)=""/118, 0x76) getdents$auto(r1, &(0x7f0000000640)={0x2, 0x38, 0x9, "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"}, 0x80000) setreuid$auto(r0, 0x0) ioctl$auto_KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000100)={0x8, 0xee00, 0x4, 0x6}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x30, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x474d}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) sendmsg$auto_NBD_CMD_STATUS(r3, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x8800) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={"66afaed5f4fc7503e86f9c743021883a80e6c1092c9b9a89781743bbecb2d266", 0x800, 0x8, 0x10001, 0x0, 0x5, 0x0}) ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, &(0x7f0000000300)={"fc8ce515e4cd5240f866ca50d1f9d3689f2b7615f89e900dc367c9b9c047842f", 0x3ff, 0xf, 0x80000001, 0x9, 0x7, 0x0}) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91\vI\x1eRN8\x99\x88G\xd9\xec\x1epJ\"ds\x1cJr\xde:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18\x89\v\xea\x1b\x95\xaf\xee\xe69\x8d(<\xc7+\x83\xfcQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd3\x81Y\xa3Fp\v\xdc\xe2\xc3\xc3\xdbS\xdc', 0xfdef, 0x0) shmctl$auto_SHM_LOCK(0x3, 0xb, &(0x7f0000000440)={{0x9, r0, r2, 0x0, 0x800, 0x5c9, 0x5}, 0xf, 0x8000, 0xfd9, 0x0, @inferred=r6, @inferred=r7, 0x0, 0x0, &(0x7f00000001c0)="979e216a8ee9fa8d", &(0x7f0000000380)="89ff6ad752dadb6e983491c0d2e79c8ac139f4027de3d22dc61aae7f9c41683e406c277a46e53580b3cf1f6c864fbf5d4dcd1098b14253287c3bdc18ee265562a0743069ac9e6d974ce0f99fd3eccdc152873747744b6d0bf14a1df237f630251f1282fb4ec41c802226801b826cb779cdbd5ec5795952e60b0afda0c37f4394f3769149e37505977063e5b088d25b617bd05c989b6e7a"}) close_range$auto(0x2, 0x8000, 0x0) socket(0xa, 0x5, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fddbdf250300000004000800040003374b0008"], 0x20}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="db002cbd7000fbdbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) r8 = openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, &(0x7f0000000200), 0xc0400, 0x0) ioctl$auto_BINDER_CTL_ADD(r8, 0xc1086201, &(0x7f0000000240)={"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", 0x4, 0x1}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0xa, 0x3, 0x3b) setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x565) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 22.466027101s ago: executing program 2 (id=2206): r0 = socket(0x11, 0x3, 0x9) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0xffffffffffffffff, &(0x7f0000000000)=@can={0x1d, r2}, 0x6a) capset$auto(0x0, 0x0) close_range$auto(0x2, 0x8000, 0x0) open(0x0, 0xa22c0, 0x155) r3 = socket(0x11, 0x80003, 0x3ff) setsockopt$auto(r3, 0x107, 0xf, 0x0, 0x6) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/conf/macvtap0/secure_redirects\x00', 0x149100, 0x0) sendmmsg$auto(r0, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f00000000c0)={&(0x7f0000000080)="4c030000", 0x49}, 0x2, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x100) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) ioprio_get$auto_IOPRIO_WHO_PGRP(0x2, r4) 22.287714296s ago: executing program 2 (id=2207): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto(r1, 0x81004532, r0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f00000000c0)) 22.172128978s ago: executing program 2 (id=2208): read$auto(0xffffffffffffffff, &(0x7f0000000000)='^\x00', 0x9) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) mmap$auto(0x0, 0xb9f, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) fcntl$auto(0x3, 0x4, 0xa553) 21.878433951s ago: executing program 2 (id=2209): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x1, 0xdf, 0x20000000000e31, 0x40000000000a5, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x8, 0x6, 0x3, 0x13, 0xffffffffffffffff, 0x400) prctl$auto(0x3d, 0x40005, 0x0, 0x6, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_VLAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf251100000008000300", @ANYRES32=r3, @ANYBLOB="06000800d519008b32eabec5e544383ca7484bb403ffcfcc4419063c4517080cad212c771cb5c6a17877dc431f64a9ddc9567d6137b8ff0e70694092ddc33548519cc6f677b61dec35647401457c8b1870199398038f9fc4b7746185f49f3da8ccbec5e3d4ea6834f488e4c4273b34aedde293e582af4bb1266b3d852159e8dd67cb13"], 0x24}, 0x1, 0x0, 0x0, 0x40801}, 0x4008090) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) r4 = io_uring_setup$auto(0xffffffbf, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x101000, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x101002, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) accept4$auto(0xffffffffffffffff, 0x0, 0x0, 0x1) write$auto_snd_seq_f_ops_seq_clientmgr(r4, &(0x7f00000000c0)="632d1bfe595046ab5c40bd6163307acb6d16baef6176e669a216aae1824ccafdd80500ffffffffdfff1a0e00fffffffe0000000000000000", 0x38) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_EDGE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x400c091) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket(0x28, 0x1, 0x0) getpeername$auto(0x3, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0006, 0x17) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) 12.535912385s ago: executing program 37 (id=2194): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097d751f33e}, 0x80) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2040}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="000829bd00ffdbdf2514000000050008001800000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) futex$auto(0x0, 0x3, 0x2, 0x0, &(0x7f0000002440)=0x8, 0x71a8dce0) mmap$auto(0x0, 0x5, 0x4000000000e2, 0xeb1, 0xffffffffffffffff, 0x8000) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) read$auto_l2cap_debugfs_fops_(0xffffffffffffffff, 0x0, 0x0) utimensat$auto(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x80, 0x1}, 0x9) sendmsg$auto_IOAM6_CMD_DEL_SCHEMA(r1, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@IOAM6_ATTR_SC_ID={0x8, 0x4, 0x21}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000044) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x15, 0x3, 0x8000) connect$auto(0x3, 0x0, 0x81) mmap$auto(0x0, 0x7, 0x20000000df, 0x19, 0x40000000000a5, 0x5) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) pread64$auto(r5, 0x0, 0x6, 0x1ff) readv$auto(0x3, 0x0, 0x4) unshare$auto(0x40000080) r6 = open(0x0, 0x161342, 0x130) write$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffffff, 0x0, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/tty/ptybd/power/control\x00', 0x2062, 0x0) sendfile$auto(r7, r7, 0x0, 0x4) mmap$auto(0xf22, 0x6, 0xfd5, 0x1e, r6, 0x0) writev$auto(0x3, &(0x7f0000004100)={0x0, 0x2000000b}, 0x3ff) mmap$auto(0x0, 0x40000a, 0xdf, 0x9b74, 0x2, 0x8004) 8.549534085s ago: executing program 38 (id=2204): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) set_mempolicy$auto(0x6, 0x0, 0x21) (async, rerun: 32) unshare$auto(0x40000080) (async, rerun: 32) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async, rerun: 32) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0xee00, 0x9, 0x5, 0xb7, 0x5}, &(0x7f00000001c0)=0x6, &(0x7f0000000080)=0x1, 0x1, 0xfff, 0x3, 0x200000000007, 0x9, 0x24, 0x15, 0xf}) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) (async, rerun: 32) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) (async) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, 0x0, 0x5) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x40000) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd15/capability\x00', 0x129102, 0x0) r3 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/binderfs/binder0\x00', 0x102, 0x0) ioctl$auto_BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/012/001\x00', 0x20400, 0x0) (async) r4 = openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9482, 0x0) read$auto_state_fops_(r4, &(0x7f00000002c0)=""/63, 0x15) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x18, 0x401, 0x300000000000) (async, rerun: 64) keyctl$auto(0x2000000000000017, 0x3ff, 0x0, 0x0, 0x3) (async, rerun: 64) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae60, 0x10000000000402) (async) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyda\x00', 0x109401, 0x0) ioctl$auto(r5, 0x540a, 0x0) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) mmap$auto(0x8000000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 2.165616373s ago: executing program 8 (id=2238): openat$auto_memtype_fops_memtype(0xffffffffffffff9c, 0x0, 0x595380, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000002b00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002ac0)={&(0x7f0000000340)=ANY=[@ANYBLOB="c0110000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x11c0}, 0x1, 0x0, 0x0, 0x80c0}, 0x8000) r3 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) sendmsg$auto_NL802154_CMD_TRIGGER_SCAN(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000001600)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040029bd7000fbdbdf25230000000f0028800800e880040000800b29cb0008000d00ffffffff05000800ff00000005000f000a00000008000c000700000008001d00", @ANYRES32=r3, @ANYBLOB="0f7cecb6484da6495954e5b161587b91b0eefd7589fa76def45d3419a8ec256d21e6ed3698c5bd9669a262336ac29d1123b7c84fa755d52d1122120074ef13c5cf47824bb26a21f2d20545d0b2afce1eb7a1a8d029e7ef729692900b5100"/106], 0x4c}}, 0x10) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230) 1.241969963s ago: executing program 8 (id=2239): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/tty/ttyuf/power/runtime_suspended_time\x00', 0x2f2700, 0x0) write$auto(0x3, 0x0, 0xfdef) sendfile$auto(r0, r0, &(0x7f0000000040)=0x3ff, 0x6) mmap$auto(0x0, 0x0, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) write$auto(0x3, 0x0, 0x7fffffff) bpf$auto(0x3, &(0x7f0000000100)=@bpf_attr_7={@map_id=0x400, 0x2, 0x7, r1}, 0x4f4) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x40090) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYRES8], 0x24}, 0x1, 0x0, 0x0, 0x20000181}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) capset$auto(0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) io_uring_setup$auto(0x6, 0x0) prctl$auto(0xaf6d, 0x1, 0x0, 0xffffffffffffffff, 0x5) socket(0x25, 0x2, 0x73) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, 0x0, 0x2000, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/rt_cache\x00', 0x2000, 0x0) select$auto(0x10, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x100004, 0xd3e, 0x1, 0x948b, 0x3, 0x800295f4da0a, 0x2, 0x3, 0x62, 0x80000001, 0x50a7, 0x6d3f, 0x1009, 0xfffffffffffffffe, 0x8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7f, 0xd, 0x1, 0x948f, 0x1005, 0x206, 0x7, 0xfffffffffffffff6, 0x7, 0x9, 0x79d, 0x6, 0x100000000000000, 0xfffffffffffffffe, 0xf]}, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000, 0x70) mknodat$auto(r3, &(0x7f00000003c0)='./file0\x00', 0xfff, 0xfffffff8) r4 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/usb/usbmon/33u\x00', 0x20202, 0x0) pread64$auto(r4, 0x0, 0xfffe, 0x9) close_range$auto(0x2, 0xa, 0x0) 911.81207ms ago: executing program 8 (id=2240): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x6, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x81, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x40, 0x0) pipe$auto(0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x642, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket(0x1, 0x5, 0x0) memfd_create$auto(0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r0, @new_prog_fd=0x4, 0x4, @old_map_fd}, 0xa3) socket(0x1d, 0x1, 0x7fff) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x801, 0x84) 595.261752ms ago: executing program 8 (id=2241): mmap$auto(0x4, 0x2000d, 0x4, 0xeb1, 0x404, 0xe136) r0 = openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, 0x0, 0x200600, 0x0) write$auto_lowpan_enable_fops_(r0, &(0x7f0000000100), 0x0) connect$auto(0x3, &(0x7f0000000080)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) ioctl$auto__ctl_fops_dm_ioctl(0xffffffffffffffff, 0xfffffff7effffd06, &(0x7f00000001c0)) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0xffffffffffffffff, 0x28000) close_range$auto(0x2, 0x8, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/ipc\x00') ioctl$auto(0x3, 0x40103e05, r1) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x24004141) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES8], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c001) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x6, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x3f00) r2 = openat$auto_output_bpc_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Virtual-1/output_bpc\x00', 0x101000, 0x0) lseek$auto(r2, 0x7fffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x8a801, 0x0) ioctl$auto_EVIOCGMASK(r3, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004}) r4 = socketcall$auto(0x8000, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) close_range$auto(0x2, 0x8, 0x0) 319.597145ms ago: executing program 8 (id=2242): r0 = socket(0x1a, 0x3, 0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001100)=ANY=[@ANYBLOB="daea86555ac48410b696b12fc3189404815ec007b21251e80055aac3f672476cdc3fcd19058a712cb9f38ff2ba383b972fe1bf1c4d0a9e83dfdbf6fcc37eed990647df3f398810e89138922f2ee7bf3b9760cb8ac3a6999504309d474db588b385573bae3112b32cc4489eccbc8c8ba7210dd4127e549ceba0e58c94b02ad882ba20fd2cb7bec109b7d7b1f855f7c4d7961500fbc866a3b9a47e3fb7144d0864bea45519fdb83ce9264ebc3b8269bf0a63943ff835651bd7df5c1db83953d55bbb0b8580525f4aa92585fd3b5eea9cd2ad66d43718c74200a7cd6db1aa4d84705afe", @ANYRES16=0x0, @ANYBLOB="2f212cbd7000fcdbdf252100000008009600", @ANYRES32=r1, @ANYBLOB="16002d800400df80dd118e6d"], 0x28}}, 0x4000000) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/kernel/perf_cpu_time_max_percent\x00', 0xa042, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r2, &(0x7f00000002c0)="81", 0x1) socket(0x2, 0x1, 0x106) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) io_uring_setup$auto(0x1, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20b42, 0x0) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cpuacct.usage_all\x00', 0x101800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000080)=""/27, 0x1b) r5 = socket(0x80000000000000a, 0x2, 0x0) sendto$auto(r5, 0x0, 0x402, 0x101, &(0x7f0000000000)=@generic={0xa, "01e983638bffff4993021400"}, 0x17) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1001, 0x9, 0x3, 0x12, 0x93b, 0x1fee1, 0x3, 0x6, 0xfffffffffffffffe, 0x9, 0x5, 0x8005, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x8, 0x4, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0xffffbffffffffffc, 0x0, 0x7fffffffffff, 0x9, 0x0, 0x0, 0x10, 0x800000, 0x831c, 0x0, 0x8, 0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3ff, 0x3]}, 0x1fe, 0x82) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r6 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r6, &(0x7f0000000200)={{0x0, 0x2000000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 0s ago: executing program 8 (id=2243): openat$auto_memtype_fops_memtype(0xffffffffffffff9c, 0x0, 0x595380, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000002b00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002ac0)={&(0x7f0000000340)=ANY=[@ANYBLOB="c0110000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x11c0}, 0x1, 0x0, 0x0, 0x80c0}, 0x8000) r3 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) sendmsg$auto_NL802154_CMD_TRIGGER_SCAN(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000001600)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040029bd7000fbdbdf25230000000f0028800800e880040000800b29cb0008000d00ffffffff05000800ff00000005000f000a00000008000c000700000008001d00", @ANYRES32=r3, @ANYBLOB="0f7cecb6484da6495954e5b161587b91b0eefd7589fa76def45d3419a8ec256d21e6ed3698c5bd9669a262336ac29d1123b7c84fa755d52d1122120074ef13c5cf47824bb26a21f2d20545d0b2afce1eb7a1a8d029e7ef729692900b5100"/106], 0x4c}}, 0x10) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230) kernel console output (not intermixed with test programs): `syz.0.1837'. [ 528.188089][T14166] FAULT_INJECTION: forcing a failure. [ 528.188089][T14166] name fail_futex, interval 1, probability 0, space 0, times 0 [ 528.294385][T14166] CPU: 0 UID: 0 PID: 14166 Comm: syz.5.1844 Not tainted syzkaller #0 PREEMPT(full) [ 528.294429][T14166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 528.294446][T14166] Call Trace: [ 528.294455][T14166] [ 528.294466][T14166] dump_stack_lvl+0x16c/0x1f0 [ 528.294505][T14166] should_fail_ex+0x512/0x640 [ 528.294550][T14166] get_futex_key+0x1d0/0x1560 [ 528.294590][T14166] ? __pfx_get_futex_key+0x10/0x10 [ 528.294621][T14166] ? rcu_is_watching+0x12/0xc0 [ 528.294645][T14166] ? irqentry_exit+0x3b/0x90 [ 528.294675][T14166] ? lockdep_hardirqs_on+0x7c/0x110 [ 528.294711][T14166] futex_wait_setup+0x9d/0x550 [ 528.294757][T14166] __futex_wait+0x193/0x2f0 [ 528.294785][T14166] ? __pfx___futex_wait+0x10/0x10 [ 528.294808][T14166] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 528.294844][T14166] ? __pfx_futex_wake_mark+0x10/0x10 [ 528.294884][T14166] ? futex_hash+0x2c5/0x380 [ 528.294917][T14166] ? futex_private_hash_put+0xd5/0x190 [ 528.294952][T14166] futex_wait+0xe8/0x380 [ 528.294975][T14166] ? __pfx_futex_wait+0x10/0x10 [ 528.295007][T14166] ? __fget_files+0x204/0x3c0 [ 528.295043][T14166] do_futex+0x229/0x350 [ 528.295077][T14166] ? __pfx_do_futex+0x10/0x10 [ 528.295112][T14166] ? fdget+0x187/0x210 [ 528.295138][T14166] ? __sys_sendmsg+0x18c/0x220 [ 528.295169][T14166] __x64_sys_futex+0x1e0/0x4c0 [ 528.295209][T14166] ? __pfx___x64_sys_futex+0x10/0x10 [ 528.295263][T14166] do_syscall_64+0xcd/0xfa0 [ 528.295299][T14166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.295326][T14166] RIP: 0033:0x7ff3bcb8f749 [ 528.295348][T14166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 528.295373][T14166] RSP: 002b:00007ff3bdaf90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 528.295399][T14166] RAX: ffffffffffffffda RBX: 00007ff3bcde5fa8 RCX: 00007ff3bcb8f749 [ 528.295418][T14166] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff3bcde5fa8 [ 528.295433][T14166] RBP: 00007ff3bcde5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 528.295448][T14166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 528.295463][T14166] R13: 00007ff3bcde6038 R14: 00007ffc78786b40 R15: 00007ffc78786c28 [ 528.295499][T14166] [ 528.912504][T14167] netlink: 'syz.5.1844': attribute type 15 has an invalid length. [ 528.920381][T14167] netlink: 186 bytes leftover after parsing attributes in process `syz.5.1844'. [ 529.205698][T14173] netlink: 266 bytes leftover after parsing attributes in process `syz.1.1847'. [ 530.720008][T14207] ubi0: attaching mtd0 [ 530.736821][T14207] ubi0: scanning is finished [ 531.604843][T14207] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 531.677012][T14218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1853'. [ 532.571010][T14237] Invalid ELF header magic: != ELF [ 532.699446][T14233] delete_channel: no stack [ 533.323411][T14255] FAULT_INJECTION: forcing a failure. [ 533.323411][T14255] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 533.342107][T14255] CPU: 0 UID: 0 PID: 14255 Comm: syz.1.1865 Not tainted syzkaller #0 PREEMPT(full) [ 533.342142][T14255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 533.342155][T14255] Call Trace: [ 533.342163][T14255] [ 533.342172][T14255] dump_stack_lvl+0x16c/0x1f0 [ 533.342208][T14255] should_fail_ex+0x512/0x640 [ 533.342246][T14255] _copy_from_user+0x2e/0xd0 [ 533.342283][T14255] copy_msghdr_from_user+0x98/0x160 [ 533.342309][T14255] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 533.342345][T14255] ? __pfx__kstrtoull+0x10/0x10 [ 533.342382][T14255] ___sys_sendmsg+0xfe/0x1d0 [ 533.342409][T14255] ? __pfx____sys_sendmsg+0x10/0x10 [ 533.342452][T14255] ? find_held_lock+0x2b/0x80 [ 533.342498][T14255] __sys_sendmmsg+0x200/0x420 [ 533.342526][T14255] ? __pfx___sys_sendmmsg+0x10/0x10 [ 533.342563][T14255] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 533.342610][T14255] ? fput+0x9b/0xd0 [ 533.342642][T14255] ? ksys_write+0x1ac/0x250 [ 533.342669][T14255] ? __pfx_ksys_write+0x10/0x10 [ 533.342703][T14255] __x64_sys_sendmmsg+0x9c/0x100 [ 533.342728][T14255] ? lockdep_hardirqs_on+0x7c/0x110 [ 533.342758][T14255] do_syscall_64+0xcd/0xfa0 [ 533.342791][T14255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.342816][T14255] RIP: 0033:0x7fc38838f749 [ 533.342842][T14255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 533.342866][T14255] RSP: 002b:00007fc3891d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 533.342894][T14255] RAX: ffffffffffffffda RBX: 00007fc3885e6180 RCX: 00007fc38838f749 [ 533.342911][T14255] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000004 [ 533.342925][T14255] RBP: 00007fc3891d9090 R08: 0000000000000000 R09: 0000000000000000 [ 533.342941][T14255] R10: 0000000000000230 R11: 0000000000000246 R12: 0000000000000001 [ 533.342956][T14255] R13: 00007fc3885e6218 R14: 00007fc3885e6180 R15: 00007ffc2265aa48 [ 533.342992][T14255] [ 534.058235][T14265] netlink: 266 bytes leftover after parsing attributes in process `syz.2.1869'. [ 534.807821][T14279] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1880'. [ 535.123161][T14260] NFSD: Unable to initialize client recovery tracking! (-110) [ 535.135553][T14260] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 535.166486][T14260] NFSD: starting 90-second grace period (net f0000426) [ 535.889183][T14305] FAULT_INJECTION: forcing a failure. [ 535.889183][T14305] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 535.923649][T14305] CPU: 1 UID: 0 PID: 14305 Comm: syz.1.1877 Not tainted syzkaller #0 PREEMPT(full) [ 535.923686][T14305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 535.923700][T14305] Call Trace: [ 535.923708][T14305] [ 535.923718][T14305] dump_stack_lvl+0x16c/0x1f0 [ 535.923754][T14305] should_fail_ex+0x512/0x640 [ 535.923794][T14305] _copy_from_user+0x2e/0xd0 [ 535.923831][T14305] core_sys_select+0x35b/0xc20 [ 535.923860][T14305] ? __pfx_core_sys_select+0x10/0x10 [ 535.923889][T14305] ? proc_fail_nth_write+0x9f/0x220 [ 535.923944][T14305] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 535.923981][T14305] kern_select+0x15d/0x1e0 [ 535.924004][T14305] ? __pfx_kern_select+0x10/0x10 [ 535.924032][T14305] ? __pfx_ksys_write+0x10/0x10 [ 535.924072][T14305] __x64_sys_select+0xbd/0x160 [ 535.924097][T14305] ? do_syscall_64+0x91/0xfa0 [ 535.924125][T14305] ? lockdep_hardirqs_on+0x7c/0x110 [ 535.924154][T14305] do_syscall_64+0xcd/0xfa0 [ 535.924184][T14305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.924210][T14305] RIP: 0033:0x7fc38838f749 [ 535.924232][T14305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.924256][T14305] RSP: 002b:00007fc3891d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 535.924280][T14305] RAX: ffffffffffffffda RBX: 00007fc3885e6180 RCX: 00007fc38838f749 [ 535.924295][T14305] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 535.924309][T14305] RBP: 00007fc3891d9090 R08: 0000000000000000 R09: 0000000000000000 [ 535.924323][T14305] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 535.924340][T14305] R13: 00007fc3885e6218 R14: 00007fc3885e6180 R15: 00007ffc2265aa48 [ 535.924378][T14305] [ 536.107141][ C1] vkms_vblank_simulate: vblank timer overrun [ 536.225179][T14297] XFS: Clearing xfsstats [ 536.504000][T14314] netlink: 146 bytes leftover after parsing attributes in process `syz.2.1879'. [ 539.391738][T14374] netlink: 266 bytes leftover after parsing attributes in process `syz.1.1892'. [ 540.197252][T14392] FAULT_INJECTION: forcing a failure. [ 540.197252][T14392] name failslab, interval 1, probability 0, space 0, times 0 [ 540.211505][T14392] CPU: 0 UID: 0 PID: 14392 Comm: syz.0.1896 Not tainted syzkaller #0 PREEMPT(full) [ 540.211542][T14392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 540.211558][T14392] Call Trace: [ 540.211568][T14392] [ 540.211579][T14392] dump_stack_lvl+0x16c/0x1f0 [ 540.211621][T14392] should_fail_ex+0x512/0x640 [ 540.211664][T14392] ? fs_reclaim_acquire+0xae/0x150 [ 540.211707][T14392] should_failslab+0xc2/0x120 [ 540.211742][T14392] __kmalloc_noprof+0xdd/0x880 [ 540.211785][T14392] ? tomoyo_encode2+0x100/0x3e0 [ 540.211826][T14392] ? tomoyo_encode2+0x100/0x3e0 [ 540.211855][T14392] tomoyo_encode2+0x100/0x3e0 [ 540.211891][T14392] tomoyo_encode+0x29/0x50 [ 540.211919][T14392] tomoyo_realpath_from_path+0x18f/0x6e0 [ 540.211961][T14392] tomoyo_check_open_permission+0x2ab/0x3c0 [ 540.211986][T14392] ? _raw_spin_unlock+0x28/0x50 [ 540.212016][T14392] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 540.212082][T14392] ? do_raw_spin_lock+0x12c/0x2b0 [ 540.212132][T14392] tomoyo_file_open+0x6b/0x90 [ 540.212168][T14392] security_file_open+0x84/0x1e0 [ 540.212198][T14392] do_dentry_open+0x596/0x1530 [ 540.212235][T14392] vfs_open+0x82/0x3f0 [ 540.212270][T14392] path_openat+0x1de4/0x2cb0 [ 540.212310][T14392] ? __pfx_path_openat+0x10/0x10 [ 540.212341][T14392] ? __lock_acquire+0xb8a/0x1c90 [ 540.212394][T14392] do_filp_open+0x20b/0x470 [ 540.212422][T14392] ? __pfx_do_filp_open+0x10/0x10 [ 540.212478][T14392] ? alloc_fd+0x471/0x7d0 [ 540.212516][T14392] do_sys_openat2+0x11b/0x1d0 [ 540.212553][T14392] ? __pfx_do_sys_openat2+0x10/0x10 [ 540.212591][T14392] ? __pfx___schedule+0x10/0x10 [ 540.212630][T14392] __x64_sys_openat+0x174/0x210 [ 540.212664][T14392] ? __pfx___x64_sys_openat+0x10/0x10 [ 540.212711][T14392] do_syscall_64+0xcd/0xfa0 [ 540.212740][T14392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.212767][T14392] RIP: 0033:0x7feb8dd8f749 [ 540.212789][T14392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 540.212815][T14392] RSP: 002b:00007feb8ecc9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 540.212863][T14392] RAX: ffffffffffffffda RBX: 00007feb8dfe6090 RCX: 00007feb8dd8f749 [ 540.212881][T14392] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 540.212899][T14392] RBP: 00007feb8de13f91 R08: 0000000000000000 R09: 0000000000000000 [ 540.212915][T14392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 540.212932][T14392] R13: 00007feb8dfe6128 R14: 00007feb8dfe6090 R15: 00007ffca2a2ca18 [ 540.212968][T14392] [ 540.480279][T14392] ERROR: Out of memory at tomoyo_realpath_from_path. [ 540.785493][T14403] random: crng reseeded on system resumption [ 541.302744][T14420] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 541.310271][T14420] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 541.392356][T14420] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 541.427260][T14420] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 541.442430][T14420] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 541.806707][T14440] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(4) [ 541.863175][T14441] netlink: 266 bytes leftover after parsing attributes in process `syz.0.1905'. [ 542.264048][T14442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1908'. [ 542.807302][T14458] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1912'. [ 542.915041][T14461] FAULT_INJECTION: forcing a failure. [ 542.915041][T14461] name failslab, interval 1, probability 0, space 0, times 0 [ 542.930254][T14461] CPU: 1 UID: 0 PID: 14461 Comm: syz.2.1914 Not tainted syzkaller #0 PREEMPT(full) [ 542.930286][T14461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 542.930301][T14461] Call Trace: [ 542.930309][T14461] [ 542.930318][T14461] dump_stack_lvl+0x16c/0x1f0 [ 542.930362][T14461] should_fail_ex+0x512/0x640 [ 542.930395][T14461] ? __kmalloc_cache_noprof+0x5f/0x780 [ 542.930422][T14461] should_failslab+0xc2/0x120 [ 542.930453][T14461] __kmalloc_cache_noprof+0x72/0x780 [ 542.930475][T14461] ? __pfx_srcu_delay_timer+0x10/0x10 [ 542.930506][T14461] ? init_srcu_struct_fields+0x97a/0xde0 [ 542.930550][T14461] ? init_srcu_struct_fields+0x97a/0xde0 [ 542.930571][T14461] init_srcu_struct_fields+0x97a/0xde0 [ 542.930592][T14461] ? lockdep_init_map_type+0x5c/0x280 [ 542.930614][T14461] kvm_dev_ioctl+0x7ac/0x1a80 [ 542.930634][T14461] ? find_held_lock+0x2b/0x80 [ 542.930647][T14461] ? hook_file_ioctl_common+0x145/0x410 [ 542.930663][T14461] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 542.930681][T14461] ? __fget_files+0x20e/0x3c0 [ 542.930698][T14461] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 542.930714][T14461] __x64_sys_ioctl+0x18e/0x210 [ 542.930736][T14461] do_syscall_64+0xcd/0xfa0 [ 542.930755][T14461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.930769][T14461] RIP: 0033:0x7fe04e58f749 [ 542.930781][T14461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 542.930794][T14461] RSP: 002b:00007fe04c7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 542.930808][T14461] RAX: ffffffffffffffda RBX: 00007fe04e7e6090 RCX: 00007fe04e58f749 [ 542.930817][T14461] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000002 [ 542.930825][T14461] RBP: 00007fe04e613f91 R08: 0000000000000000 R09: 0000000000000000 [ 542.930834][T14461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 542.930842][T14461] R13: 00007fe04e7e6128 R14: 00007fe04e7e6090 R15: 00007ffc080c9ce8 [ 542.930860][T14461] [ 543.352073][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout [ 543.358238][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 543.443900][T14468] Bluetooth: hci3: command 0x0406 tx timeout [ 543.450216][T14468] Bluetooth: hci2: command 0x0c1a tx timeout [ 544.861715][T14505] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1922'. [ 545.399329][T14517] FAULT_INJECTION: forcing a failure. [ 545.399329][T14517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 545.457146][T14517] CPU: 1 UID: 0 PID: 14517 Comm: syz.0.1925 Not tainted syzkaller #0 PREEMPT(full) [ 545.457183][T14517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 545.457197][T14517] Call Trace: [ 545.457206][T14517] [ 545.457216][T14517] dump_stack_lvl+0x16c/0x1f0 [ 545.457251][T14517] should_fail_ex+0x512/0x640 [ 545.457293][T14517] _copy_from_user+0x2e/0xd0 [ 545.457333][T14517] copy_msghdr_from_user+0x98/0x160 [ 545.457360][T14517] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 545.457404][T14517] ___sys_sendmsg+0xfe/0x1d0 [ 545.457431][T14517] ? __pfx____sys_sendmsg+0x10/0x10 [ 545.457452][T14517] ? __lock_acquire+0x622/0x1c90 [ 545.457524][T14517] __sys_sendmsg+0x16d/0x220 [ 545.457551][T14517] ? __pfx___sys_sendmsg+0x10/0x10 [ 545.457600][T14517] do_syscall_64+0xcd/0xfa0 [ 545.457632][T14517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.457658][T14517] RIP: 0033:0x7feb8dd8f749 [ 545.457678][T14517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 545.457702][T14517] RSP: 002b:00007feb8ecea038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 545.457727][T14517] RAX: ffffffffffffffda RBX: 00007feb8dfe5fa0 RCX: 00007feb8dd8f749 [ 545.457744][T14517] RDX: 0000000000008010 RSI: 0000200000000900 RDI: 0000000000000003 [ 545.457760][T14517] RBP: 00007feb8ecea090 R08: 0000000000000000 R09: 0000000000000000 [ 545.457776][T14517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 545.457791][T14517] R13: 00007feb8dfe6038 R14: 00007feb8dfe5fa0 R15: 00007ffca2a2ca18 [ 545.457859][T14517] [ 545.632849][T14468] Bluetooth: hci3: command 0x0406 tx timeout [ 546.502228][T14532] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 546.649801][T14532] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 546.691155][T14532] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 546.701550][T14543] FAULT_INJECTION: forcing a failure. [ 546.701550][T14543] name failslab, interval 1, probability 0, space 0, times 0 [ 546.714841][T14543] CPU: 0 UID: 0 PID: 14543 Comm: syz.5.1931 Not tainted syzkaller #0 PREEMPT(full) [ 546.714863][T14543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 546.714871][T14543] Call Trace: [ 546.714876][T14543] [ 546.714882][T14543] dump_stack_lvl+0x16c/0x1f0 [ 546.714903][T14543] should_fail_ex+0x512/0x640 [ 546.714927][T14543] should_failslab+0xc2/0x120 [ 546.714947][T14543] __kmalloc_cache_noprof+0x72/0x780 [ 546.714961][T14543] ? tipc_dest_push+0x148/0x310 [ 546.714983][T14543] ? tipc_dest_push+0x148/0x310 [ 546.715001][T14543] tipc_dest_push+0x148/0x310 [ 546.715021][T14543] tipc_nametbl_lookup_mcast_sockets+0x2b8/0x500 [ 546.715046][T14543] tipc_sk_mcast_rcv+0x4e6/0xfa0 [ 546.715059][T14543] ? __lock_acquire+0xb8a/0x1c90 [ 546.715084][T14543] ? __pfx_tipc_sk_mcast_rcv+0x10/0x10 [ 546.715096][T14543] ? __lock_acquire+0x622/0x1c90 [ 546.715123][T14543] ? find_held_lock+0x2b/0x80 [ 546.715138][T14543] ? tipc_mcast_xmit+0x6d5/0xfe0 [ 546.715154][T14543] tipc_mcast_xmit+0x711/0xfe0 [ 546.715166][T14543] ? __pfx__copy_from_iter+0x10/0x10 [ 546.715191][T14543] ? __pfx___alloc_skb+0x10/0x10 [ 546.715214][T14543] ? __pfx_tipc_mcast_xmit+0x10/0x10 [ 546.715227][T14543] ? __lock_acquire+0x622/0x1c90 [ 546.715263][T14543] ? tipc_send_group_bcast+0x803/0xa50 [ 546.715281][T14543] tipc_send_group_bcast+0x803/0xa50 [ 546.715306][T14543] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 546.715324][T14543] ? __pfx___might_resched+0x10/0x10 [ 546.715340][T14543] ? find_held_lock+0x2b/0x80 [ 546.715353][T14543] ? __pfx_woken_wake_function+0x10/0x10 [ 546.715367][T14543] ? down_write+0x14d/0x200 [ 546.715392][T14543] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 546.715411][T14543] __tipc_sendmsg+0x4ab/0x19a0 [ 546.715430][T14543] ? __pfx___tipc_sendmsg+0x10/0x10 [ 546.715459][T14543] ? __local_bh_enable_ip+0xa4/0x120 [ 546.715479][T14543] tipc_sendmsg+0x4f/0x70 [ 546.715492][T14543] ____sys_sendmsg+0xa98/0xc70 [ 546.715510][T14543] ? copy_msghdr_from_user+0x10a/0x160 [ 546.715524][T14543] ? __pfx_____sys_sendmsg+0x10/0x10 [ 546.715544][T14543] ? __pfx__kstrtoull+0x10/0x10 [ 546.715565][T14543] ___sys_sendmsg+0x134/0x1d0 [ 546.715580][T14543] ? __pfx____sys_sendmsg+0x10/0x10 [ 546.715608][T14543] ? find_held_lock+0x2b/0x80 [ 546.715633][T14543] __sys_sendmmsg+0x200/0x420 [ 546.715649][T14543] ? __pfx___sys_sendmmsg+0x10/0x10 [ 546.715669][T14543] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 546.715694][T14543] ? fput+0x9b/0xd0 [ 546.715712][T14543] ? ksys_write+0x1ac/0x250 [ 546.715727][T14543] ? __pfx_ksys_write+0x10/0x10 [ 546.715745][T14543] __x64_sys_sendmmsg+0x9c/0x100 [ 546.715758][T14543] ? lockdep_hardirqs_on+0x7c/0x110 [ 546.715775][T14543] do_syscall_64+0xcd/0xfa0 [ 546.715793][T14543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.715807][T14543] RIP: 0033:0x7ff3bcb8f749 [ 546.715820][T14543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 546.715833][T14543] RSP: 002b:00007ff3bdab7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 546.715847][T14543] RAX: ffffffffffffffda RBX: 00007ff3bcde6180 RCX: 00007ff3bcb8f749 [ 546.715856][T14543] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000004 [ 546.715865][T14543] RBP: 00007ff3bdab7090 R08: 0000000000000000 R09: 0000000000000000 [ 546.715873][T14543] R10: 0000000000000230 R11: 0000000000000246 R12: 0000000000000001 [ 546.715881][T14543] R13: 00007ff3bcde6218 R14: 00007ff3bcde6180 R15: 00007ffc78786c28 [ 546.715900][T14543] [ 547.063746][ C0] vkms_vblank_simulate: vblank timer overrun [ 547.115761][T14532] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 547.482093][T14552] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1932'. [ 548.551983][T14468] Bluetooth: hci0: command 0x0c1a tx timeout [ 548.712065][T14468] Bluetooth: hci2: command 0x0c1a tx timeout [ 548.718188][T14468] Bluetooth: hci1: command 0x0c1a tx timeout [ 549.162538][T14594] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1941'. [ 549.191920][T14468] Bluetooth: hci3: command 0x0406 tx timeout [ 549.959669][T14605] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(4) [ 550.784672][T14621] FAULT_INJECTION: forcing a failure. [ 550.784672][T14621] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 550.868967][T14621] CPU: 1 UID: 0 PID: 14621 Comm: syz.0.1947 Not tainted syzkaller #0 PREEMPT(full) [ 550.869003][T14621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 550.869024][T14621] Call Trace: [ 550.869033][T14621] [ 550.869045][T14621] dump_stack_lvl+0x16c/0x1f0 [ 550.869082][T14621] should_fail_ex+0x512/0x640 [ 550.869123][T14621] should_fail_alloc_page+0xe7/0x130 [ 550.869159][T14621] prepare_alloc_pages+0x3c2/0x610 [ 550.869194][T14621] ? rcu_is_watching+0x12/0xc0 [ 550.869225][T14621] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 550.869273][T14621] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 550.869317][T14621] ? rcu_is_watching+0x12/0xc0 [ 550.869345][T14621] ? trace_kmalloc+0x2b/0xd0 [ 550.869376][T14621] ? __kmalloc_node_track_caller_noprof+0x362/0x8a0 [ 550.869411][T14621] ? __alloc_skb+0x166/0x380 [ 550.869445][T14621] ? rcu_watching_snap_stopped_since+0xc1/0x110 [ 550.869476][T14621] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 550.869527][T14621] ? policy_nodemask+0xea/0x4e0 [ 550.869562][T14621] alloc_pages_mpol+0x1fb/0x550 [ 550.869595][T14621] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 550.869623][T14621] ? __pfx___alloc_skb+0x10/0x10 [ 550.869656][T14621] ? find_held_lock+0x2b/0x80 [ 550.869686][T14621] alloc_pages_noprof+0x131/0x390 [ 550.869717][T14621] alloc_skb_with_frags+0x24a/0x860 [ 550.869752][T14621] sock_alloc_send_pskb+0x7f9/0x980 [ 550.869799][T14621] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 550.869851][T14621] tun_get_user+0x7e2/0x3cc0 [ 550.869898][T14621] ? __pfx_tun_get_user+0x10/0x10 [ 550.869928][T14621] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 550.869962][T14621] ? find_held_lock+0x2b/0x80 [ 550.869988][T14621] ? tun_get+0x191/0x370 [ 550.870018][T14621] tun_chr_write_iter+0xdc/0x210 [ 550.870048][T14621] vfs_write+0x7d3/0x11d0 [ 550.870073][T14621] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 550.870102][T14621] ? __pfx_vfs_write+0x10/0x10 [ 550.870126][T14621] ? find_held_lock+0x2b/0x80 [ 550.870170][T14621] __x64_sys_pwrite64+0x1eb/0x250 [ 550.870197][T14621] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 550.870239][T14621] do_syscall_64+0xcd/0xfa0 [ 550.870274][T14621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.870300][T14621] RIP: 0033:0x7feb8dd8f749 [ 550.870321][T14621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 550.870345][T14621] RSP: 002b:00007feb8ecc9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 550.870369][T14621] RAX: ffffffffffffffda RBX: 00007feb8dfe6090 RCX: 00007feb8dd8f749 [ 550.870385][T14621] RDX: 000000000000fdf2 RSI: 0000000000000000 RDI: 00000000000000c8 [ 550.870401][T14621] RBP: 00007feb8de13f91 R08: 0000000000000000 R09: 0000000000000000 [ 550.870416][T14621] R10: 000000000000003a R11: 0000000000000246 R12: 0000000000000000 [ 550.870430][T14621] R13: 00007feb8dfe6128 R14: 00007feb8dfe6090 R15: 00007ffca2a2ca18 [ 550.870465][T14621] [ 552.374331][T14666] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1954'. [ 553.220992][T14693] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1961'. [ 553.536209][T14710] FAULT_INJECTION: forcing a failure. [ 553.536209][T14710] name failslab, interval 1, probability 0, space 0, times 0 [ 553.598182][T14710] CPU: 1 UID: 0 PID: 14710 Comm: syz.0.1962 Not tainted syzkaller #0 PREEMPT(full) [ 553.598218][T14710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 553.598240][T14710] Call Trace: [ 553.598249][T14710] [ 553.598258][T14710] dump_stack_lvl+0x16c/0x1f0 [ 553.598295][T14710] should_fail_ex+0x512/0x640 [ 553.598332][T14710] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 553.598360][T14710] should_failslab+0xc2/0x120 [ 553.598393][T14710] kmem_cache_alloc_noprof+0x75/0x6e0 [ 553.598420][T14710] ? skb_clone+0x190/0x3f0 [ 553.598457][T14710] ? skb_clone+0x190/0x3f0 [ 553.598485][T14710] skb_clone+0x190/0x3f0 [ 553.598516][T14710] netlink_deliver_tap+0xabd/0xd30 [ 553.598551][T14710] netlink_unicast+0x64c/0x870 [ 553.598589][T14710] ? __pfx_netlink_unicast+0x10/0x10 [ 553.598621][T14710] ? __pfx___might_resched+0x10/0x10 [ 553.598667][T14710] netlink_sendmsg+0x8c8/0xdd0 [ 553.598701][T14710] ? __pfx_netlink_sendmsg+0x10/0x10 [ 553.598734][T14710] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 553.598778][T14710] ____sys_sendmsg+0xa98/0xc70 [ 553.598811][T14710] ? copy_msghdr_from_user+0x10a/0x160 [ 553.598838][T14710] ? __pfx_____sys_sendmsg+0x10/0x10 [ 553.598888][T14710] ___sys_sendmsg+0x134/0x1d0 [ 553.598916][T14710] ? __pfx____sys_sendmsg+0x10/0x10 [ 553.598939][T14710] ? __lock_acquire+0x622/0x1c90 [ 553.599016][T14710] __sys_sendmsg+0x16d/0x220 [ 553.599043][T14710] ? __pfx___sys_sendmsg+0x10/0x10 [ 553.599093][T14710] do_syscall_64+0xcd/0xfa0 [ 553.599127][T14710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.599153][T14710] RIP: 0033:0x7feb8dd8f749 [ 553.599173][T14710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 553.599201][T14710] RSP: 002b:00007feb8ecea038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 553.599232][T14710] RAX: ffffffffffffffda RBX: 00007feb8dfe5fa0 RCX: 00007feb8dd8f749 [ 553.599249][T14710] RDX: 0000000000008010 RSI: 0000200000000900 RDI: 0000000000000003 [ 553.599265][T14710] RBP: 00007feb8ecea090 R08: 0000000000000000 R09: 0000000000000000 [ 553.599279][T14710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 553.599294][T14710] R13: 00007feb8dfe6038 R14: 00007feb8dfe5fa0 R15: 00007ffca2a2ca18 [ 553.599331][T14710] [ 554.345333][ T30] audit: type=1804 audit(4294967656.790:13): pid=14727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1966" name=2F6E6577726F6F742F3532332F22050820 dev="tmpfs" ino=2709 res=1 errno=0 [ 554.490669][ T30] audit: type=1800 audit(4294967656.790:14): pid=14727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1966" name=22050820 dev="tmpfs" ino=2709 res=0 errno=0 [ 555.387436][T14752] netlink: 266 bytes leftover after parsing attributes in process `syz.2.1970'. [ 555.579673][T14759] netlink: set zone limit has 8 unknown bytes [ 556.528137][T14793] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1977'. [ 557.394828][T14817] FAULT_INJECTION: forcing a failure. [ 557.394828][T14817] name failslab, interval 1, probability 0, space 0, times 0 [ 557.426652][T14817] CPU: 0 UID: 0 PID: 14817 Comm: syz.2.1983 Not tainted syzkaller #0 PREEMPT(full) [ 557.426692][T14817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 557.426702][T14817] Call Trace: [ 557.426708][T14817] [ 557.426714][T14817] dump_stack_lvl+0x16c/0x1f0 [ 557.426737][T14817] should_fail_ex+0x512/0x640 [ 557.426758][T14817] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 557.426775][T14817] should_failslab+0xc2/0x120 [ 557.426794][T14817] kmem_cache_alloc_node_noprof+0x78/0x770 [ 557.426813][T14817] ? __alloc_skb+0x2b2/0x380 [ 557.426838][T14817] ? __alloc_skb+0x2b2/0x380 [ 557.426863][T14817] __alloc_skb+0x2b2/0x380 [ 557.426884][T14817] ? __pfx___alloc_skb+0x10/0x10 [ 557.426905][T14817] ? genl_rcv_msg+0x4e0/0x800 [ 557.426921][T14817] ? genl_rcv_msg+0x4bb/0x800 [ 557.426943][T14817] netlink_ack+0x15d/0xb80 [ 557.426964][T14817] netlink_rcv_skb+0x332/0x420 [ 557.426979][T14817] ? __pfx_genl_rcv_msg+0x10/0x10 [ 557.426996][T14817] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 557.427019][T14817] ? netlink_deliver_tap+0x1ae/0xd30 [ 557.427036][T14817] genl_rcv+0x28/0x40 [ 557.427051][T14817] netlink_unicast+0x5aa/0x870 [ 557.427069][T14817] ? __pfx_netlink_unicast+0x10/0x10 [ 557.427083][T14817] ? __pfx___might_resched+0x10/0x10 [ 557.427105][T14817] netlink_sendmsg+0x8c8/0xdd0 [ 557.427123][T14817] ? __pfx_netlink_sendmsg+0x10/0x10 [ 557.427140][T14817] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 557.427164][T14817] ____sys_sendmsg+0xa98/0xc70 [ 557.427183][T14817] ? copy_msghdr_from_user+0x10a/0x160 [ 557.427197][T14817] ? __pfx_____sys_sendmsg+0x10/0x10 [ 557.427224][T14817] ___sys_sendmsg+0x134/0x1d0 [ 557.427238][T14817] ? __pfx____sys_sendmsg+0x10/0x10 [ 557.427251][T14817] ? __lock_acquire+0x622/0x1c90 [ 557.427298][T14817] __sys_sendmsg+0x16d/0x220 [ 557.427312][T14817] ? __pfx___sys_sendmsg+0x10/0x10 [ 557.427338][T14817] do_syscall_64+0xcd/0xfa0 [ 557.427357][T14817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.427372][T14817] RIP: 0033:0x7fe04e58f749 [ 557.427384][T14817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 557.427397][T14817] RSP: 002b:00007fe04f341038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 557.427411][T14817] RAX: ffffffffffffffda RBX: 00007fe04e7e5fa0 RCX: 00007fe04e58f749 [ 557.427421][T14817] RDX: 0000000000008010 RSI: 0000200000000900 RDI: 0000000000000003 [ 557.427429][T14817] RBP: 00007fe04f341090 R08: 0000000000000000 R09: 0000000000000000 [ 557.427437][T14817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 557.427446][T14817] R13: 00007fe04e7e6038 R14: 00007fe04e7e5fa0 R15: 00007ffc080c9ce8 [ 557.427465][T14817] [ 559.790493][T14889] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1995'. [ 561.646826][T14922] FAULT_INJECTION: forcing a failure. [ 561.646826][T14922] name failslab, interval 1, probability 0, space 0, times 0 [ 561.683983][T14922] CPU: 0 UID: 0 PID: 14922 Comm: syz.2.2006 Not tainted syzkaller #0 PREEMPT(full) [ 561.684022][T14922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 561.684037][T14922] Call Trace: [ 561.684046][T14922] [ 561.684055][T14922] dump_stack_lvl+0x16c/0x1f0 [ 561.684092][T14922] should_fail_ex+0x512/0x640 [ 561.684127][T14922] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 561.684156][T14922] should_failslab+0xc2/0x120 [ 561.684188][T14922] kmem_cache_alloc_noprof+0x75/0x6e0 [ 561.684215][T14922] ? skb_clone+0x190/0x3f0 [ 561.684249][T14922] ? skb_clone+0x190/0x3f0 [ 561.684273][T14922] skb_clone+0x190/0x3f0 [ 561.684297][T14922] netlink_deliver_tap+0xabd/0xd30 [ 561.684330][T14922] netlink_unicast+0x71f/0x870 [ 561.684360][T14922] ? __pfx_netlink_unicast+0x10/0x10 [ 561.684387][T14922] ? genl_rcv_msg+0x4bb/0x800 [ 561.684439][T14922] netlink_ack+0x696/0xb80 [ 561.684476][T14922] netlink_rcv_skb+0x332/0x420 [ 561.684504][T14922] ? __pfx_genl_rcv_msg+0x10/0x10 [ 561.684537][T14922] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 561.684581][T14922] ? netlink_deliver_tap+0x1ae/0xd30 [ 561.684630][T14922] genl_rcv+0x28/0x40 [ 561.684657][T14922] netlink_unicast+0x5aa/0x870 [ 561.684691][T14922] ? __pfx_netlink_unicast+0x10/0x10 [ 561.684718][T14922] ? __pfx___might_resched+0x10/0x10 [ 561.684758][T14922] netlink_sendmsg+0x8c8/0xdd0 [ 561.684792][T14922] ? __pfx_netlink_sendmsg+0x10/0x10 [ 561.684825][T14922] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 561.684877][T14922] ____sys_sendmsg+0xa98/0xc70 [ 561.684911][T14922] ? copy_msghdr_from_user+0x10a/0x160 [ 561.684937][T14922] ? __pfx_____sys_sendmsg+0x10/0x10 [ 561.684987][T14922] ___sys_sendmsg+0x134/0x1d0 [ 561.685016][T14922] ? __pfx____sys_sendmsg+0x10/0x10 [ 561.685040][T14922] ? __lock_acquire+0x622/0x1c90 [ 561.685121][T14922] __sys_sendmsg+0x16d/0x220 [ 561.685147][T14922] ? __pfx___sys_sendmsg+0x10/0x10 [ 561.685209][T14922] do_syscall_64+0xcd/0xfa0 [ 561.685240][T14922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.685265][T14922] RIP: 0033:0x7fe04e58f749 [ 561.685286][T14922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 561.685308][T14922] RSP: 002b:00007fe04f341038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 561.685331][T14922] RAX: ffffffffffffffda RBX: 00007fe04e7e5fa0 RCX: 00007fe04e58f749 [ 561.685348][T14922] RDX: 0000000000008010 RSI: 0000200000000900 RDI: 0000000000000003 [ 561.685362][T14922] RBP: 00007fe04f341090 R08: 0000000000000000 R09: 0000000000000000 [ 561.685377][T14922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 561.685396][T14922] R13: 00007fe04e7e6038 R14: 00007fe04e7e5fa0 R15: 00007ffc080c9ce8 [ 561.685443][T14922] [ 562.974078][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.991187][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.262384][T14964] nbd: must specify at least one socket [ 564.294660][T14964] netlink: 266 bytes leftover after parsing attributes in process `syz.0.2019'. [ 564.677226][T14977] FAULT_INJECTION: forcing a failure. [ 564.677226][T14977] name failslab, interval 1, probability 0, space 0, times 0 [ 564.690493][T14977] CPU: 1 UID: 0 PID: 14977 Comm: syz.5.2022 Not tainted syzkaller #0 PREEMPT(full) [ 564.690530][T14977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 564.690546][T14977] Call Trace: [ 564.690556][T14977] [ 564.690566][T14977] dump_stack_lvl+0x16c/0x1f0 [ 564.690608][T14977] should_fail_ex+0x512/0x640 [ 564.690646][T14977] ? __kmalloc_cache_noprof+0x5f/0x780 [ 564.690676][T14977] should_failslab+0xc2/0x120 [ 564.690709][T14977] __kmalloc_cache_noprof+0x72/0x780 [ 564.690733][T14977] ? snd_seq_timer_new+0x44/0x1b0 [ 564.690766][T14977] ? snd_seq_timer_new+0x44/0x1b0 [ 564.690801][T14977] snd_seq_timer_new+0x44/0x1b0 [ 564.690829][T14977] snd_seq_queue_alloc+0x177/0x5a0 [ 564.690870][T14977] snd_seq_ioctl_create_queue+0xa9/0x390 [ 564.690904][T14977] call_seq_client_ctl+0x9f/0x110 [ 564.690936][T14977] snd_seq_kernel_client_ctl+0x77/0xd0 [ 564.690967][T14977] alloc_seq_queue+0xda/0x180 [ 564.691000][T14977] ? __pfx_alloc_seq_queue+0x10/0x10 [ 564.691050][T14977] ? mark_held_locks+0x49/0x80 [ 564.691084][T14977] ? _raw_spin_unlock_irq+0x23/0x50 [ 564.691112][T14977] ? lockdep_hardirqs_on+0x7c/0x110 [ 564.691147][T14977] snd_seq_oss_open+0x38c/0xa20 [ 564.691187][T14977] odev_open+0x79/0xc0 [ 564.691215][T14977] ? __pfx_odev_open+0x10/0x10 [ 564.691244][T14977] soundcore_open+0x40c/0x580 [ 564.691280][T14977] ? __pfx_soundcore_open+0x10/0x10 [ 564.691310][T14977] chrdev_open+0x234/0x6a0 [ 564.691341][T14977] ? __pfx_apparmor_file_open+0x10/0x10 [ 564.691379][T14977] ? __pfx_chrdev_open+0x10/0x10 [ 564.691413][T14977] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 564.691450][T14977] do_dentry_open+0x982/0x1530 [ 564.691482][T14977] ? __pfx_chrdev_open+0x10/0x10 [ 564.691520][T14977] vfs_open+0x82/0x3f0 [ 564.691560][T14977] path_openat+0x1de4/0x2cb0 [ 564.691601][T14977] ? __pfx_path_openat+0x10/0x10 [ 564.691634][T14977] ? __lock_acquire+0xb8a/0x1c90 [ 564.691672][T14977] do_filp_open+0x20b/0x470 [ 564.691702][T14977] ? __pfx_do_filp_open+0x10/0x10 [ 564.691757][T14977] ? alloc_fd+0x471/0x7d0 [ 564.691807][T14977] do_sys_openat2+0x11b/0x1d0 [ 564.691840][T14977] ? __pfx_do_sys_openat2+0x10/0x10 [ 564.691889][T14977] __x64_sys_openat+0x174/0x210 [ 564.691926][T14977] ? __pfx___x64_sys_openat+0x10/0x10 [ 564.691978][T14977] do_syscall_64+0xcd/0xfa0 [ 564.692010][T14977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.692033][T14977] RIP: 0033:0x7ff3bcb8f749 [ 564.692052][T14977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 564.692078][T14977] RSP: 002b:00007ff3bdaf9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 564.692104][T14977] RAX: ffffffffffffffda RBX: 00007ff3bcde5fa0 RCX: 00007ff3bcb8f749 [ 564.692120][T14977] RDX: 00000000001c8740 RSI: 0000200000000540 RDI: ffffffffffffff9c [ 564.692137][T14977] RBP: 00007ff3bcc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 564.692152][T14977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 564.692166][T14977] R13: 00007ff3bcde6038 R14: 00007ff3bcde5fa0 R15: 00007ffc78786c28 [ 564.692203][T14977] [ 567.501746][T15035] random: crng reseeded on system resumption [ 567.529570][T15036] hub 1-0:1.0: USB hub found [ 567.543742][T15036] hub 1-0:1.0: 1 port detected [ 569.448287][T15079] nbd: must specify a size in bytes for the device [ 569.464830][T15080] FAULT_INJECTION: forcing a failure. [ 569.464830][T15080] name failslab, interval 1, probability 0, space 0, times 0 [ 569.475014][T15079] netlink: 266 bytes leftover after parsing attributes in process `syz.0.2051'. [ 569.479007][T15080] CPU: 1 UID: 0 PID: 15080 Comm: syz.2.2043 Not tainted syzkaller #0 PREEMPT(full) [ 569.479045][T15080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 569.479062][T15080] Call Trace: [ 569.479071][T15080] [ 569.479080][T15080] dump_stack_lvl+0x16c/0x1f0 [ 569.479119][T15080] should_fail_ex+0x512/0x640 [ 569.479157][T15080] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 569.479191][T15080] should_failslab+0xc2/0x120 [ 569.479224][T15080] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 569.479255][T15080] ? alloc_inode+0x64/0x240 [ 569.479294][T15080] ? __pfx_rpc_alloc_inode+0x10/0x10 [ 569.479331][T15080] ? alloc_inode+0x64/0x240 [ 569.479361][T15080] alloc_inode+0x64/0x240 [ 569.479405][T15080] new_inode+0x22/0x1c0 [ 569.479444][T15080] rpc_mkpipe_dentry+0x12f/0x560 [ 569.479479][T15080] rpc_fill_super+0x3c6/0x4f0 [ 569.479506][T15080] ? __pfx_rpc_fill_super+0x10/0x10 [ 569.479530][T15080] get_tree_keyed+0x10e/0x1d0 [ 569.479559][T15080] vfs_get_tree+0x8e/0x340 [ 569.479596][T15080] vfs_cmd_create+0xd7/0x2a0 [ 569.479631][T15080] __do_sys_fsconfig+0x7b8/0xbe0 [ 569.479668][T15080] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 569.479720][T15080] do_syscall_64+0xcd/0xfa0 [ 569.479754][T15080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.479781][T15080] RIP: 0033:0x7fe04e58f749 [ 569.479802][T15080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 569.479827][T15080] RSP: 002b:00007fe04f341038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 569.479852][T15080] RAX: ffffffffffffffda RBX: 00007fe04e7e5fa0 RCX: 00007fe04e58f749 [ 569.479870][T15080] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 569.479885][T15080] RBP: 00007fe04e613f91 R08: 0000000000000000 R09: 0000000000000000 [ 569.479900][T15080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 569.479915][T15080] R13: 00007fe04e7e6038 R14: 00007fe04e7e5fa0 R15: 00007ffc080c9ce8 [ 569.479952][T15080] [ 569.480200][T15080] rpc_mkpipe_dentry() failed to create pipe clntXX/gssd (errno = -12) [ 569.992100][T15084] ptrace attach of "./syz-executor exec"[15094] was attempted by "./syz-executor exec"[15084] [ 571.199679][T15125] nbd: must specify at least one socket [ 571.210197][T15125] netlink: 266 bytes leftover after parsing attributes in process `syz.5.2054'. [ 571.534825][T15135] FAULT_INJECTION: forcing a failure. [ 571.534825][T15135] name failslab, interval 1, probability 0, space 0, times 0 [ 571.565007][T15135] CPU: 0 UID: 0 PID: 15135 Comm: syz.5.2056 Not tainted syzkaller #0 PREEMPT(full) [ 571.565030][T15135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 571.565039][T15135] Call Trace: [ 571.565044][T15135] [ 571.565050][T15135] dump_stack_lvl+0x16c/0x1f0 [ 571.565072][T15135] should_fail_ex+0x512/0x640 [ 571.565093][T15135] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 571.565113][T15135] should_failslab+0xc2/0x120 [ 571.565130][T15135] kmem_cache_alloc_node_noprof+0x78/0x770 [ 571.565145][T15135] ? __alloc_skb+0x2b2/0x380 [ 571.565172][T15135] ? __alloc_skb+0x2b2/0x380 [ 571.565206][T15135] __alloc_skb+0x2b2/0x380 [ 571.565243][T15135] ? __pfx___alloc_skb+0x10/0x10 [ 571.565286][T15135] ? netlink_has_listeners+0x20f/0x430 [ 571.565319][T15135] alloc_uevent_skb+0x7d/0x210 [ 571.565359][T15135] kobject_uevent_env+0xca4/0x1870 [ 571.565398][T15135] ? kobject_put+0xab/0x5a0 [ 571.565444][T15135] device_add+0x10dd/0x1aa0 [ 571.565473][T15135] ? __pfx_device_add+0x10/0x10 [ 571.565495][T15135] ? preempt_schedule_thunk+0x16/0x30 [ 571.565543][T15135] usb_set_configuration+0x1187/0x1e20 [ 571.565584][T15135] bConfigurationValue_store+0x100/0x180 [ 571.565600][T15135] ? __pfx_bConfigurationValue_store+0x10/0x10 [ 571.565616][T15135] ? find_held_lock+0x2b/0x80 [ 571.565633][T15135] ? sysfs_file_kobj+0xe4/0x290 [ 571.565650][T15135] ? __pfx_bConfigurationValue_store+0x10/0x10 [ 571.565664][T15135] dev_attr_store+0x58/0x80 [ 571.565682][T15135] ? __pfx_dev_attr_store+0x10/0x10 [ 571.565701][T15135] sysfs_kf_write+0xf2/0x150 [ 571.565718][T15135] kernfs_fop_write_iter+0x3af/0x570 [ 571.565730][T15135] ? __pfx_sysfs_kf_write+0x10/0x10 [ 571.565747][T15135] iter_file_splice_write+0xa24/0x12e0 [ 571.565774][T15135] ? __pfx_iter_file_splice_write+0x10/0x10 [ 571.565792][T15135] ? __pfx_copy_splice_read+0x10/0x10 [ 571.565816][T15135] ? __pfx_iter_file_splice_write+0x10/0x10 [ 571.565832][T15135] direct_splice_actor+0x192/0x6c0 [ 571.565848][T15135] splice_direct_to_actor+0x345/0xa30 [ 571.565863][T15135] ? __pfx_direct_splice_actor+0x10/0x10 [ 571.565881][T15135] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 571.565901][T15135] do_splice_direct+0x174/0x240 [ 571.565915][T15135] ? __pfx_do_splice_direct+0x10/0x10 [ 571.565929][T15135] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 571.565953][T15135] ? rw_verify_area+0xcf/0x6c0 [ 571.565969][T15135] do_sendfile+0xb06/0xe50 [ 571.565986][T15135] ? __pfx_do_sendfile+0x10/0x10 [ 571.566003][T15135] ? __x64_sys_futex+0x1e0/0x4c0 [ 571.566020][T15135] ? __x64_sys_futex+0x1e9/0x4c0 [ 571.566040][T15135] __x64_sys_sendfile64+0x1d8/0x220 [ 571.566077][T15135] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 571.566102][T15135] do_syscall_64+0xcd/0xfa0 [ 571.566123][T15135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.566137][T15135] RIP: 0033:0x7ff3bcb8f749 [ 571.566150][T15135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 571.566164][T15135] RSP: 002b:00007ff3bdaf9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 571.566178][T15135] RAX: ffffffffffffffda RBX: 00007ff3bcde5fa0 RCX: 00007ff3bcb8f749 [ 571.566188][T15135] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 571.566197][T15135] RBP: 00007ff3bcc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 571.566205][T15135] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 571.566214][T15135] R13: 00007ff3bcde6038 R14: 00007ff3bcde5fa0 R15: 00007ffc78786c28 [ 571.566235][T15135] [ 571.570005][T15135] hub 1-0:1.0: USB hub found [ 571.932992][T15135] hub 1-0:1.0: 1 port detected [ 572.178511][T14627] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 572.192594][T14627] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 572.217302][T14627] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 572.239033][T14627] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 572.250377][T14627] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 573.082223][T15144] chnl_net:caif_netlink_parms(): no params data found [ 573.257827][T15144] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.265281][T15144] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.274535][T15144] bridge_slave_0: entered allmulticast mode [ 573.289111][T15144] bridge_slave_0: entered promiscuous mode [ 573.298414][T15144] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.307041][T15144] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.314459][T15144] bridge_slave_1: entered allmulticast mode [ 573.324414][T15144] bridge_slave_1: entered promiscuous mode [ 573.375334][T15144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 573.414389][T15144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 573.480069][T15144] team0: Port device team_slave_0 added [ 573.512174][T15144] team0: Port device team_slave_1 added [ 573.582652][T15144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 573.589816][T15144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 573.625644][T15144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 573.639711][T15144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 573.647273][T15144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 573.692105][T15144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 573.822941][T15144] hsr_slave_0: entered promiscuous mode [ 573.831330][T15144] hsr_slave_1: entered promiscuous mode [ 573.853451][T15144] debugfs: 'hsr0' already exists in 'hsr' [ 573.869557][T15144] Cannot create hsr debugfs directory [ 574.223623][T15144] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 574.236325][T15144] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 574.269648][T15144] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 574.288592][T15144] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 574.312850][T14627] Bluetooth: hci4: command tx timeout [ 574.527485][T15144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.576002][T15144] 8021q: adding VLAN 0 to HW filter on device team0 [ 574.614840][T14787] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.622098][T14787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 574.674303][T14633] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.681868][T14633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 575.172452][T15184] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(4) [ 575.395795][T15144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 576.393180][T14627] Bluetooth: hci4: command tx timeout [ 576.508928][T15144] veth0_vlan: entered promiscuous mode [ 576.534752][T15144] veth1_vlan: entered promiscuous mode [ 576.955506][T15201] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 [ 577.193033][T15210] hub 1-0:1.0: USB hub found [ 577.283752][T15210] hub 1-0:1.0: 1 port detected [ 577.713736][T15144] veth0_macvtap: entered promiscuous mode [ 577.814085][T15144] veth1_macvtap: entered promiscuous mode [ 577.869656][T15220] usb usb13: usbfs: process 15220 (syz.2.2067) did not claim interface 0 before use [ 577.902099][T15144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 577.943443][T15144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 577.999595][T15217] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.013435][T15217] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.023324][T15217] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.038231][T15217] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.228527][T15217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.266377][T15217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 578.406716][T14699] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.435927][T14699] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 578.473930][T14627] Bluetooth: hci4: command tx timeout [ 578.491790][T15229] FAULT_INJECTION: forcing a failure. [ 578.491790][T15229] name failslab, interval 1, probability 0, space 0, times 0 [ 578.623172][T15229] CPU: 1 UID: 0 PID: 15229 Comm: syz.0.2069 Not tainted syzkaller #0 PREEMPT(full) [ 578.623213][T15229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 578.623230][T15229] Call Trace: [ 578.623240][T15229] [ 578.623250][T15229] dump_stack_lvl+0x16c/0x1f0 [ 578.623291][T15229] should_fail_ex+0x512/0x640 [ 578.623333][T15229] ? __kmalloc_cache_noprof+0x5f/0x780 [ 578.623361][T15229] should_failslab+0xc2/0x120 [ 578.623398][T15229] __kmalloc_cache_noprof+0x72/0x780 [ 578.623426][T15229] ? vb2_vmalloc_alloc+0xf9/0x3f0 [ 578.623457][T15229] ? vb2_vmalloc_alloc+0xf9/0x3f0 [ 578.623482][T15229] vb2_vmalloc_alloc+0xf9/0x3f0 [ 578.623509][T15229] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 578.623535][T15229] __vb2_queue_alloc+0x8c9/0x1280 [ 578.623594][T15229] vb2_core_reqbufs+0xa90/0xfe0 [ 578.623642][T15229] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 578.623710][T15229] __vb2_init_fileio+0x3f1/0x1100 [ 578.623735][T15229] ? __mutex_lock+0x1c5/0x1060 [ 578.623774][T15229] ? __pfx___futex_wait+0x10/0x10 [ 578.623798][T15229] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 578.623834][T15229] __vb2_perform_fileio+0x9c2/0x1660 [ 578.623867][T15229] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 578.623901][T15229] vb2_fop_read+0x215/0x3e0 [ 578.623932][T15229] ? common_file_perm+0x1a9/0x340 [ 578.623964][T15229] v4l2_read+0x229/0x360 [ 578.623993][T15229] ? __pfx_v4l2_read+0x10/0x10 [ 578.624024][T15229] vfs_read+0x1e4/0xcf0 [ 578.624061][T15229] ? __pfx_vfs_read+0x10/0x10 [ 578.624087][T15229] ? find_held_lock+0x2b/0x80 [ 578.624116][T15229] ? __fget_files+0x204/0x3c0 [ 578.624149][T15229] ? __fget_files+0x20e/0x3c0 [ 578.624187][T15229] ksys_read+0x12a/0x250 [ 578.624215][T15229] ? __pfx_ksys_read+0x10/0x10 [ 578.624255][T15229] do_syscall_64+0xcd/0xfa0 [ 578.624290][T15229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.624318][T15229] RIP: 0033:0x7feb8dd8f749 [ 578.624340][T15229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 578.624366][T15229] RSP: 002b:00007feb8ecc9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 578.624391][T15229] RAX: ffffffffffffffda RBX: 00007feb8dfe6090 RCX: 00007feb8dd8f749 [ 578.624410][T15229] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000005 [ 578.624426][T15229] RBP: 00007feb8de13f91 R08: 0000000000000000 R09: 0000000000000000 [ 578.624442][T15229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 578.624458][T15229] R13: 00007feb8dfe6128 R14: 00007feb8dfe6090 R15: 00007ffca2a2ca18 [ 578.624495][T15229] [ 579.226298][T15232] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 579.248401][T15232] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 579.262385][T15232] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 579.279159][T15232] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 579.432317][T15232] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 579.516290][T15232] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 579.553961][T15232] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 579.747298][T15245] netlink: 266 bytes leftover after parsing attributes in process `syz.6.2071'. [ 579.760941][T15245] IPv6: NLM_F_CREATE should be specified when creating new route [ 580.479605][T15260] sd 0:0:1:0: device reset [ 581.272388][T14627] Bluetooth: hci2: command 0x0c1a tx timeout [ 581.278491][T14627] Bluetooth: hci1: command 0x0c1a tx timeout [ 581.284838][T14644] Bluetooth: hci0: command 0x0c1a tx timeout [ 581.346746][T15269] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(4) [ 581.362119][T14627] Bluetooth: hci3: command 0x0406 tx timeout [ 581.522713][T14627] Bluetooth: hci4: command 0x0c1a tx timeout [ 582.925344][T15292] FAULT_INJECTION: forcing a failure. [ 582.925344][T15292] name failslab, interval 1, probability 0, space 0, times 0 [ 583.012790][T15292] CPU: 0 UID: 0 PID: 15292 Comm: syz.2.2082 Not tainted syzkaller #0 PREEMPT(full) [ 583.012830][T15292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 583.012845][T15292] Call Trace: [ 583.012851][T15292] [ 583.012857][T15292] dump_stack_lvl+0x16c/0x1f0 [ 583.012880][T15292] should_fail_ex+0x512/0x640 [ 583.012902][T15292] ? __kmalloc_cache_node_noprof+0x62/0x7a0 [ 583.012926][T15292] should_failslab+0xc2/0x120 [ 583.012944][T15292] __kmalloc_cache_node_noprof+0x75/0x7a0 [ 583.012959][T15292] ? stack_depot_save_flags+0x29/0x9c0 [ 583.012979][T15292] ? __get_vm_area_node+0x101/0x330 [ 583.013001][T15292] ? __get_vm_area_node+0x101/0x330 [ 583.013018][T15292] __get_vm_area_node+0x101/0x330 [ 583.013036][T15292] ? __vb2_init_fileio+0x3f1/0x1100 [ 583.013051][T15292] __vmalloc_node_range_noprof+0x271/0x1480 [ 583.013071][T15292] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 583.013090][T15292] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 583.013107][T15292] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 583.013133][T15292] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 583.013145][T15292] vmalloc_user_noprof+0x9e/0xe0 [ 583.013175][T15292] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 583.013189][T15292] vb2_vmalloc_alloc+0x135/0x3f0 [ 583.013204][T15292] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 583.013218][T15292] __vb2_queue_alloc+0x8c9/0x1280 [ 583.013250][T15292] vb2_core_reqbufs+0xa90/0xfe0 [ 583.013274][T15292] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 583.013305][T15292] __vb2_init_fileio+0x3f1/0x1100 [ 583.013317][T15292] ? __mutex_lock+0x1c5/0x1060 [ 583.013341][T15292] __vb2_perform_fileio+0x9c2/0x1660 [ 583.013359][T15292] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 583.013379][T15292] vb2_fop_read+0x215/0x3e0 [ 583.013396][T15292] ? common_file_perm+0x1a9/0x340 [ 583.013414][T15292] v4l2_read+0x229/0x360 [ 583.013430][T15292] ? __pfx_v4l2_read+0x10/0x10 [ 583.013446][T15292] vfs_read+0x1e4/0xcf0 [ 583.013465][T15292] ? __pfx_vfs_read+0x10/0x10 [ 583.013478][T15292] ? find_held_lock+0x2b/0x80 [ 583.013493][T15292] ? __fget_files+0x204/0x3c0 [ 583.013521][T15292] ? __fget_files+0x20e/0x3c0 [ 583.013541][T15292] ksys_read+0x12a/0x250 [ 583.013557][T15292] ? __pfx_ksys_read+0x10/0x10 [ 583.013578][T15292] do_syscall_64+0xcd/0xfa0 [ 583.013597][T15292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.013611][T15292] RIP: 0033:0x7fe04e58f749 [ 583.013624][T15292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 583.013638][T15292] RSP: 002b:00007fe04c7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 583.013652][T15292] RAX: ffffffffffffffda RBX: 00007fe04e7e6090 RCX: 00007fe04e58f749 [ 583.013662][T15292] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000005 [ 583.013671][T15292] RBP: 00007fe04e613f91 R08: 0000000000000000 R09: 0000000000000000 [ 583.013680][T15292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 583.013689][T15292] R13: 00007fe04e7e6128 R14: 00007fe04e7e6090 R15: 00007ffc080c9ce8 [ 583.013710][T15292] [ 583.017507][T15292] syz.2.2082: vmalloc error: size 4096, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 583.416489][T15292] CPU: 1 UID: 0 PID: 15292 Comm: syz.2.2082 Not tainted syzkaller #0 PREEMPT(full) [ 583.416525][T15292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 583.416538][T15292] Call Trace: [ 583.416546][T15292] [ 583.416555][T15292] dump_stack_lvl+0x16c/0x1f0 [ 583.416590][T15292] warn_alloc+0x248/0x3a0 [ 583.416616][T15292] ? __pfx_warn_alloc+0x10/0x10 [ 583.416636][T15292] ? rcu_is_watching+0x12/0xc0 [ 583.416661][T15292] ? trace_kmalloc+0x2b/0xd0 [ 583.416693][T15292] ? __get_vm_area_node+0x101/0x330 [ 583.416734][T15292] ? __kasan_kmalloc+0x8a/0xb0 [ 583.416766][T15292] ? __get_vm_area_node+0x208/0x330 [ 583.416808][T15292] __vmalloc_node_range_noprof+0xaf5/0x1480 [ 583.416856][T15292] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 583.416901][T15292] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 583.416946][T15292] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 583.416972][T15292] vmalloc_user_noprof+0x9e/0xe0 [ 583.417008][T15292] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 583.417031][T15292] vb2_vmalloc_alloc+0x135/0x3f0 [ 583.417057][T15292] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 583.417082][T15292] __vb2_queue_alloc+0x8c9/0x1280 [ 583.417134][T15292] vb2_core_reqbufs+0xa90/0xfe0 [ 583.417180][T15292] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 583.417237][T15292] __vb2_init_fileio+0x3f1/0x1100 [ 583.417259][T15292] ? __mutex_lock+0x1c5/0x1060 [ 583.417293][T15292] __vb2_perform_fileio+0x9c2/0x1660 [ 583.417311][T15292] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 583.417331][T15292] vb2_fop_read+0x215/0x3e0 [ 583.417349][T15292] ? common_file_perm+0x1a9/0x340 [ 583.417368][T15292] v4l2_read+0x229/0x360 [ 583.417385][T15292] ? __pfx_v4l2_read+0x10/0x10 [ 583.417401][T15292] vfs_read+0x1e4/0xcf0 [ 583.417421][T15292] ? __pfx_vfs_read+0x10/0x10 [ 583.417435][T15292] ? find_held_lock+0x2b/0x80 [ 583.417451][T15292] ? __fget_files+0x204/0x3c0 [ 583.417468][T15292] ? __fget_files+0x20e/0x3c0 [ 583.417488][T15292] ksys_read+0x12a/0x250 [ 583.417506][T15292] ? __pfx_ksys_read+0x10/0x10 [ 583.417526][T15292] do_syscall_64+0xcd/0xfa0 [ 583.417545][T15292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.417561][T15292] RIP: 0033:0x7fe04e58f749 [ 583.417574][T15292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 583.417588][T15292] RSP: 002b:00007fe04c7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 583.417602][T15292] RAX: ffffffffffffffda RBX: 00007fe04e7e6090 RCX: 00007fe04e58f749 [ 583.417611][T15292] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000005 [ 583.417620][T15292] RBP: 00007fe04e613f91 R08: 0000000000000000 R09: 0000000000000000 [ 583.417629][T15292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 583.417637][T15292] R13: 00007fe04e7e6128 R14: 00007fe04e7e6090 R15: 00007ffc080c9ce8 [ 583.417656][T15292] [ 583.421074][T15292] Mem-Info: [ 583.616145][T14627] Bluetooth: hci4: command 0x0c1a tx timeout [ 583.738019][T15292] active_anon:22415 inactive_anon:0 isolated_anon:0 [ 583.738019][T15292] active_file:11047 inactive_file:48014 isolated_file:0 [ 583.738019][T15292] unevictable:768 dirty:680 writeback:0 [ 583.738019][T15292] slab_reclaimable:11783 slab_unreclaimable:106835 [ 583.738019][T15292] mapped:36506 shmem:1385 pagetables:1526 [ 583.738019][T15292] sec_pagetables:0 bounce:0 [ 583.738019][T15292] kernel_misc_reclaimable:0 [ 583.738019][T15292] free:1255432 free_pcp:38045 free_cma:0 [ 583.790206][T15292] Node 0 active_anon:89460kB inactive_anon:0kB active_file:44188kB inactive_file:191920kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:146024kB dirty:2720kB writeback:0kB shmem:4004kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:47104kB kernel_stack:12624kB pagetables:5964kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 583.790371][T15290] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 583.840864][T15292] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 583.873964][T15290] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 583.880222][T15290] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 583.886718][T15290] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 583.893045][T15290] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 583.962453][T15300] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 583.979420][T15292] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 584.013501][T15292] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 584.019341][T15292] Node 0 DMA32 free:1156436kB boost:0kB min:34364kB low:42952kB high:51540kB reserved_highatomic:0KB free_highatomic:0KB active_anon:89464kB inactive_anon:0kB active_file:44188kB inactive_file:191920kB unevictable:1536kB writepending:2728kB zspages:0kB present:3129332kB managed:2545064kB mlocked:0kB bounce:0kB free_pcp:95456kB local_pcp:42148kB free_cma:0kB [ 584.055198][T15292] lowmem_reserve[]: 0 0 1 1 1 [ 584.060436][T15292] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 584.109767][T15292] lowmem_reserve[]: 0 0 0 0 0 [ 584.114760][T15292] Node 1 Normal free:3859512kB boost:0kB min:55512kB low:69388kB high:83264kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:46928kB local_pcp:29380kB free_cma:0kB [ 584.182934][T15292] lowmem_reserve[]: 0 0 0 0 0 [ 584.187836][T15292] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 584.215974][T15292] Node 0 DMA32: 6147*4kB (UME) 2820*8kB (UME) 1663*16kB (UME) 708*32kB (ME) 427*64kB (UM) 121*128kB (UM) 142*256kB (UM) 71*512kB (UME) 45*1024kB (UME) 3*2048kB (M) 218*4096kB (M) = 1157084kB [ 584.236664][T15292] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 584.249002][T15292] Node 1 Normal: 158*4kB (UME) 54*8kB (UME) 21*16kB (UME) 228*32kB (UM) 77*64kB (UME) 22*128kB (UME) 4*256kB (M) 6*512kB (UME) 3*1024kB (UM) 3*2048kB (UME) 935*4096kB (M) = 3859512kB [ 584.268698][T15292] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 584.280253][T15292] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 584.290696][T15292] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 584.301020][T15292] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 584.311274][T15292] 60992 total pagecache pages [ 584.316908][T15292] 0 pages in swap cache [ 584.511941][T15292] Free swap = 124996kB [ 584.517412][T15292] Total swap = 124996kB [ 584.569530][T15292] 2097051 pages RAM [ 584.638963][T15292] 0 pages HighMem/MovableOnly [ 584.662076][T15292] 428695 pages reserved [ 584.681912][T15292] 0 pages cma reserved [ 585.842215][T14627] Bluetooth: hci0: command 0x0c1a tx timeout [ 585.924421][T14627] Bluetooth: hci4: command 0x0c1a tx timeout [ 585.930471][T15146] Bluetooth: hci3: command 0x0406 tx timeout [ 585.937328][T15146] Bluetooth: hci2: command 0x0c1a tx timeout [ 585.946633][T14644] Bluetooth: hci1: command 0x0c1a tx timeout [ 586.329863][ T30] audit: type=1326 audit(4294967688.810:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15332 comm="syz.6.2091" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f429eb8f749 code=0x0 [ 586.797762][T15342] FAULT_INJECTION: forcing a failure. [ 586.797762][T15342] name fail_futex, interval 1, probability 0, space 0, times 0 [ 586.813101][T15342] CPU: 1 UID: 0 PID: 15342 Comm: syz.0.2093 Not tainted syzkaller #0 PREEMPT(full) [ 586.813142][T15342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 586.813158][T15342] Call Trace: [ 586.813167][T15342] [ 586.813178][T15342] dump_stack_lvl+0x16c/0x1f0 [ 586.813219][T15342] should_fail_ex+0x512/0x640 [ 586.813272][T15342] get_futex_key+0x1d0/0x1560 [ 586.813317][T15342] ? __pfx_get_futex_key+0x10/0x10 [ 586.813367][T15342] futex_wake+0xea/0x530 [ 586.813410][T15342] ? rcu_is_watching+0x12/0xc0 [ 586.813442][T15342] ? __pfx_futex_wake+0x10/0x10 [ 586.813488][T15342] ? kmem_cache_free+0x2d4/0x6c0 [ 586.813528][T15342] ? putname+0x154/0x1a0 [ 586.813575][T15342] do_futex+0x1e3/0x350 [ 586.813613][T15342] ? __pfx_do_futex+0x10/0x10 [ 586.813653][T15342] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 586.813691][T15342] __x64_sys_futex+0x1e0/0x4c0 [ 586.813732][T15342] ? __x64_sys_openat+0x174/0x210 [ 586.813771][T15342] ? __pfx___x64_sys_futex+0x10/0x10 [ 586.813823][T15342] do_syscall_64+0xcd/0xfa0 [ 586.813860][T15342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.813888][T15342] RIP: 0033:0x7feb8dd8f749 [ 586.813911][T15342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 586.813937][T15342] RSP: 002b:00007feb8ecea0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 586.813965][T15342] RAX: ffffffffffffffda RBX: 00007feb8dfe5fa8 RCX: 00007feb8dd8f749 [ 586.813984][T15342] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007feb8dfe5fac [ 586.814001][T15342] RBP: 00007feb8dfe5fa0 R08: 00007feb8eceb000 R09: 0000000000000000 [ 586.814018][T15342] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 586.814034][T15342] R13: 00007feb8dfe6038 R14: 00007ffca2a2c930 R15: 00007ffca2a2ca18 [ 586.814072][T15342] [ 587.165473][T15346] FAULT_INJECTION: forcing a failure. [ 587.165473][T15346] name failslab, interval 1, probability 0, space 0, times 0 [ 587.178704][T15346] CPU: 1 UID: 0 PID: 15346 Comm: syz.0.2102 Not tainted syzkaller #0 PREEMPT(full) [ 587.178756][T15346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 587.178771][T15346] Call Trace: [ 587.178779][T15346] [ 587.178788][T15346] dump_stack_lvl+0x16c/0x1f0 [ 587.178824][T15346] should_fail_ex+0x512/0x640 [ 587.178859][T15346] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 587.178889][T15346] should_failslab+0xc2/0x120 [ 587.178921][T15346] kmem_cache_alloc_noprof+0x75/0x6e0 [ 587.178946][T15346] ? alloc_empty_file+0x55/0x1e0 [ 587.178988][T15346] ? alloc_empty_file+0x55/0x1e0 [ 587.179019][T15346] alloc_empty_file+0x55/0x1e0 [ 587.179053][T15346] path_openat+0xda/0x2cb0 [ 587.179093][T15346] ? __pfx_path_openat+0x10/0x10 [ 587.179123][T15346] ? __lock_acquire+0xb8a/0x1c90 [ 587.179160][T15346] do_filp_open+0x20b/0x470 [ 587.179189][T15346] ? __pfx_do_filp_open+0x10/0x10 [ 587.179243][T15346] ? alloc_fd+0x471/0x7d0 [ 587.179279][T15346] do_sys_openat2+0x11b/0x1d0 [ 587.179314][T15346] ? __pfx_do_sys_openat2+0x10/0x10 [ 587.179353][T15346] ? __fget_files+0x20e/0x3c0 [ 587.179385][T15346] __x64_sys_openat+0x174/0x210 [ 587.179421][T15346] ? __pfx___x64_sys_openat+0x10/0x10 [ 587.179456][T15346] ? ksys_write+0x1ac/0x250 [ 587.179496][T15346] do_syscall_64+0xcd/0xfa0 [ 587.179529][T15346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.179555][T15346] RIP: 0033:0x7feb8dd8f749 [ 587.179610][T15346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 587.179634][T15346] RSP: 002b:00007feb8ecea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 587.179658][T15346] RAX: ffffffffffffffda RBX: 00007feb8dfe5fa0 RCX: 00007feb8dd8f749 [ 587.179675][T15346] RDX: 0000000000000001 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 587.179692][T15346] RBP: 00007feb8ecea090 R08: 0000000000000000 R09: 0000000000000000 [ 587.179708][T15346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 587.179723][T15346] R13: 00007feb8dfe6038 R14: 00007feb8dfe5fa0 R15: 00007ffca2a2ca18 [ 587.179759][T15346] [ 587.396439][T15349] FAULT_INJECTION: forcing a failure. [ 587.396439][T15349] name failslab, interval 1, probability 0, space 0, times 0 [ 587.413020][T15349] CPU: 1 UID: 0 PID: 15349 Comm: syz.6.2095 Not tainted syzkaller #0 PREEMPT(full) [ 587.413063][T15349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 587.413078][T15349] Call Trace: [ 587.413086][T15349] [ 587.413097][T15349] dump_stack_lvl+0x16c/0x1f0 [ 587.413134][T15349] should_fail_ex+0x512/0x640 [ 587.413174][T15349] ? __kmalloc_cache_noprof+0x5f/0x780 [ 587.413200][T15349] should_failslab+0xc2/0x120 [ 587.413235][T15349] __kmalloc_cache_noprof+0x72/0x780 [ 587.413260][T15349] ? vb2_vmalloc_alloc+0xf9/0x3f0 [ 587.413292][T15349] ? vb2_vmalloc_alloc+0xf9/0x3f0 [ 587.413315][T15349] vb2_vmalloc_alloc+0xf9/0x3f0 [ 587.413340][T15349] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 587.413362][T15349] __vb2_queue_alloc+0x8c9/0x1280 [ 587.413411][T15349] vb2_core_reqbufs+0xa90/0xfe0 [ 587.413460][T15349] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 587.413516][T15349] __vb2_init_fileio+0x3f1/0x1100 [ 587.413550][T15349] ? __mutex_lock+0x1c5/0x1060 [ 587.413588][T15349] ? __pfx___futex_wait+0x10/0x10 [ 587.413612][T15349] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 587.413652][T15349] __vb2_perform_fileio+0x9c2/0x1660 [ 587.413688][T15349] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 587.413726][T15349] vb2_fop_read+0x215/0x3e0 [ 587.413759][T15349] ? common_file_perm+0x1a9/0x340 [ 587.413792][T15349] v4l2_read+0x229/0x360 [ 587.413823][T15349] ? __pfx_v4l2_read+0x10/0x10 [ 587.413855][T15349] vfs_read+0x1e4/0xcf0 [ 587.413891][T15349] ? __pfx_vfs_read+0x10/0x10 [ 587.413916][T15349] ? find_held_lock+0x2b/0x80 [ 587.413945][T15349] ? __fget_files+0x204/0x3c0 [ 587.413977][T15349] ? __fget_files+0x20e/0x3c0 [ 587.414014][T15349] ksys_read+0x12a/0x250 [ 587.414041][T15349] ? __pfx_ksys_read+0x10/0x10 [ 587.414080][T15349] do_syscall_64+0xcd/0xfa0 [ 587.414115][T15349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.414141][T15349] RIP: 0033:0x7f429eb8f749 [ 587.414162][T15349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 587.414187][T15349] RSP: 002b:00007f429fab1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 587.414212][T15349] RAX: ffffffffffffffda RBX: 00007f429ede6090 RCX: 00007f429eb8f749 [ 587.414231][T15349] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000005 [ 587.414248][T15349] RBP: 00007f429ec13f91 R08: 0000000000000000 R09: 0000000000000000 [ 587.414265][T15349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 587.414281][T15349] R13: 00007f429ede6128 R14: 00007f429ede6090 R15: 00007ffc14670428 [ 587.414321][T15349] [ 590.297618][ T30] audit: type=1326 audit(4294967692.780:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15396 comm="syz.0.2103" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb8dd8f749 code=0x0 [ 591.481436][T15328] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 591.494999][T15416] netlink: 266 bytes leftover after parsing attributes in process `syz.6.2110'. [ 591.512075][T15328] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 591.523280][T15328] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 591.534395][T15328] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 591.543336][T15328] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 591.862788][T15434] netlink: zone id is out of range [ 591.880518][T15434] netlink: zone id is out of range [ 592.273755][T15418] chnl_net:caif_netlink_parms(): no params data found [ 592.595677][T15418] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.609729][T15418] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.620156][T15418] bridge_slave_0: entered allmulticast mode [ 592.633599][T15418] bridge_slave_0: entered promiscuous mode [ 592.646561][T15418] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.678208][T15418] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.696953][T15418] bridge_slave_1: entered allmulticast mode [ 592.704669][T15418] bridge_slave_1: entered promiscuous mode [ 592.759330][T15455] netlink: 266 bytes leftover after parsing attributes in process `syz.2.2119'. [ 592.879590][T15458] FAULT_INJECTION: forcing a failure. [ 592.879590][T15458] name fail_futex, interval 1, probability 0, space 0, times 0 [ 592.905696][T15458] CPU: 0 UID: 0 PID: 15458 Comm: syz.2.2120 Not tainted syzkaller #0 PREEMPT(full) [ 592.905737][T15458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 592.905754][T15458] Call Trace: [ 592.905762][T15458] [ 592.905773][T15458] dump_stack_lvl+0x16c/0x1f0 [ 592.905810][T15458] should_fail_ex+0x512/0x640 [ 592.905853][T15458] get_futex_key+0x1d0/0x1560 [ 592.905891][T15458] ? __pfx_get_futex_key+0x10/0x10 [ 592.905936][T15458] futex_wake+0xea/0x530 [ 592.905975][T15458] ? rcu_is_watching+0x12/0xc0 [ 592.906004][T15458] ? __pfx_futex_wake+0x10/0x10 [ 592.906048][T15458] ? kmem_cache_free+0x2d4/0x6c0 [ 592.906075][T15458] ? putname+0x154/0x1a0 [ 592.906116][T15458] do_futex+0x1e3/0x350 [ 592.906152][T15458] ? __pfx_do_futex+0x10/0x10 [ 592.906190][T15458] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 592.906234][T15458] __x64_sys_futex+0x1e0/0x4c0 [ 592.906273][T15458] ? __x64_sys_openat+0x174/0x210 [ 592.906314][T15458] ? __pfx___x64_sys_futex+0x10/0x10 [ 592.906353][T15458] ? xfd_validate_state+0x61/0x180 [ 592.906402][T15458] do_syscall_64+0xcd/0xfa0 [ 592.906437][T15458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.906464][T15458] RIP: 0033:0x7fe04e58f749 [ 592.906486][T15458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 592.906511][T15458] RSP: 002b:00007fe04f3410e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 592.906537][T15458] RAX: ffffffffffffffda RBX: 00007fe04e7e5fa8 RCX: 00007fe04e58f749 [ 592.906555][T15458] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe04e7e5fac [ 592.906572][T15458] RBP: 00007fe04e7e5fa0 R08: 00007fe04f342000 R09: 0000000000000000 [ 592.906590][T15458] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 592.906605][T15458] R13: 00007fe04e7e6038 R14: 00007ffc080c9c00 R15: 00007ffc080c9ce8 [ 592.906642][T15458] [ 593.165805][T15418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 593.194667][T15418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 593.355415][T15418] team0: Port device team_slave_0 added [ 593.364895][T15418] team0: Port device team_slave_1 added [ 593.419216][T15418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 593.426982][T15418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.510662][T15418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 593.660337][T15328] Bluetooth: hci5: command tx timeout [ 593.826561][T15418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 593.839684][T15480] random: crng reseeded on system resumption [ 593.846030][T15418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.916822][T15418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 594.032968][T15485] FAULT_INJECTION: forcing a failure. [ 594.032968][T15485] name failslab, interval 1, probability 0, space 0, times 0 [ 594.109189][T15485] CPU: 0 UID: 0 PID: 15485 Comm: syz.2.2125 Not tainted syzkaller #0 PREEMPT(full) [ 594.109225][T15485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 594.109239][T15485] Call Trace: [ 594.109249][T15485] [ 594.109259][T15485] dump_stack_lvl+0x16c/0x1f0 [ 594.109297][T15485] should_fail_ex+0x512/0x640 [ 594.109334][T15485] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 594.109366][T15485] should_failslab+0xc2/0x120 [ 594.109400][T15485] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 594.109426][T15485] ? __pfx___might_resched+0x10/0x10 [ 594.109450][T15485] ? sock_alloc_inode+0x25/0x1c0 [ 594.109482][T15485] ? __pfx_sock_alloc_inode+0x10/0x10 [ 594.109509][T15485] ? sock_alloc_inode+0x25/0x1c0 [ 594.109536][T15485] sock_alloc_inode+0x25/0x1c0 [ 594.109562][T15485] alloc_inode+0x64/0x240 [ 594.109594][T15485] sock_alloc+0x40/0x280 [ 594.109624][T15485] __sock_create+0xc1/0x8d0 [ 594.109663][T15485] __sys_socket+0x14d/0x260 [ 594.109696][T15485] ? __pfx___sys_socket+0x10/0x10 [ 594.109730][T15485] ? xfd_validate_state+0x61/0x180 [ 594.109763][T15485] ? __pfx_ksys_write+0x10/0x10 [ 594.109796][T15485] __x64_sys_socket+0x72/0xb0 [ 594.109826][T15485] ? lockdep_hardirqs_on+0x7c/0x110 [ 594.109855][T15485] do_syscall_64+0xcd/0xfa0 [ 594.109888][T15485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.109914][T15485] RIP: 0033:0x7fe04e58f749 [ 594.109933][T15485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 594.109954][T15485] RSP: 002b:00007fe04c7d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 594.109978][T15485] RAX: ffffffffffffffda RBX: 00007fe04e7e6180 RCX: 00007fe04e58f749 [ 594.109993][T15485] RDX: 0000000000000fff RSI: 000000000000000a RDI: 000000000000001d [ 594.110008][T15485] RBP: 00007fe04e613f91 R08: 0000000000000000 R09: 0000000000000000 [ 594.110033][T15485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 594.110048][T15485] R13: 00007fe04e7e6218 R14: 00007fe04e7e6180 R15: 00007ffc080c9ce8 [ 594.110083][T15485] [ 594.110095][T15485] socket: no more sockets [ 594.388830][T15418] hsr_slave_0: entered promiscuous mode [ 594.413342][T15418] hsr_slave_1: entered promiscuous mode [ 594.426316][T15418] debugfs: 'hsr0' already exists in 'hsr' [ 594.447843][T15418] Cannot create hsr debugfs directory [ 594.826213][T15418] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 594.838380][T15418] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 594.850463][T15418] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 594.864648][T15418] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 594.989020][T15418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 595.012743][T15418] 8021q: adding VLAN 0 to HW filter on device team0 [ 595.028916][T14787] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.036180][T14787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 595.064253][T14699] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.071438][T14699] bridge0: port 2(bridge_slave_1) entered forwarding state [ 595.175096][T15495] ubi31: attaching mtd0 [ 595.416762][T15500] netlink: 266 bytes leftover after parsing attributes in process `syz.6.2128'. [ 595.553922][T15418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 595.621128][T15504] FAULT_INJECTION: forcing a failure. [ 595.621128][T15504] name fail_futex, interval 1, probability 0, space 0, times 0 [ 595.637351][T15504] CPU: 0 UID: 0 PID: 15504 Comm: syz.6.2129 Not tainted syzkaller #0 PREEMPT(full) [ 595.637392][T15504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 595.637408][T15504] Call Trace: [ 595.637417][T15504] [ 595.637428][T15504] dump_stack_lvl+0x16c/0x1f0 [ 595.637468][T15504] should_fail_ex+0x512/0x640 [ 595.637512][T15504] get_futex_key+0x1d0/0x1560 [ 595.637552][T15504] ? __pfx_get_futex_key+0x10/0x10 [ 595.637598][T15504] futex_wake+0xea/0x530 [ 595.637648][T15504] ? rcu_is_watching+0x12/0xc0 [ 595.637678][T15504] ? __pfx_futex_wake+0x10/0x10 [ 595.637724][T15504] ? kmem_cache_free+0x2d4/0x6c0 [ 595.637750][T15504] ? putname+0x154/0x1a0 [ 595.637792][T15504] do_futex+0x1e3/0x350 [ 595.637827][T15504] ? __pfx_do_futex+0x10/0x10 [ 595.637863][T15504] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 595.637899][T15504] __x64_sys_futex+0x1e0/0x4c0 [ 595.637936][T15504] ? __x64_sys_openat+0x174/0x210 [ 595.637974][T15504] ? __pfx___x64_sys_futex+0x10/0x10 [ 595.638028][T15504] do_syscall_64+0xcd/0xfa0 [ 595.638063][T15504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.638091][T15504] RIP: 0033:0x7f429eb8f749 [ 595.638113][T15504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 595.638139][T15504] RSP: 002b:00007f429fad20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 595.638165][T15504] RAX: ffffffffffffffda RBX: 00007f429ede5fa8 RCX: 00007f429eb8f749 [ 595.638183][T15504] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f429ede5fac [ 595.638199][T15504] RBP: 00007f429ede5fa0 R08: 00007f429fad3000 R09: 0000000000000000 [ 595.638217][T15504] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 595.638232][T15504] R13: 00007f429ede6038 R14: 00007ffc14670340 R15: 00007ffc14670428 [ 595.638270][T15504] [ 596.042385][T15328] Bluetooth: hci5: command tx timeout [ 596.456013][T15418] veth0_vlan: entered promiscuous mode [ 596.493540][T15418] veth1_vlan: entered promiscuous mode [ 596.734064][T15418] veth0_macvtap: entered promiscuous mode [ 596.785229][T15418] veth1_macvtap: entered promiscuous mode [ 596.934641][T15418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 597.136555][T15418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 597.198972][T14787] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.219416][T14787] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.250584][T14787] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.331965][T14787] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.429408][T15217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.454769][T15217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.531593][T14699] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.541446][T14699] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.072860][T15328] Bluetooth: hci5: command tx timeout [ 598.559155][T15555] netlink: 266 bytes leftover after parsing attributes in process `syz.7.2137'. [ 598.570810][T15555] IPv6: NLM_F_CREATE should be specified when creating new route [ 598.765005][T15562] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 598.777798][T15562] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 598.818806][T15557] FAULT_INJECTION: forcing a failure. [ 598.818806][T15557] name fail_futex, interval 1, probability 0, space 0, times 0 [ 598.833205][T15557] CPU: 0 UID: 0 PID: 15557 Comm: syz.2.2138 Not tainted syzkaller #0 PREEMPT(full) [ 598.833241][T15557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 598.833257][T15557] Call Trace: [ 598.833276][T15557] [ 598.833287][T15557] dump_stack_lvl+0x16c/0x1f0 [ 598.833332][T15557] should_fail_ex+0x512/0x640 [ 598.833381][T15557] get_futex_key+0x1d0/0x1560 [ 598.833419][T15557] ? __pfx_get_futex_key+0x10/0x10 [ 598.833455][T15557] ? find_held_lock+0x2b/0x80 [ 598.833482][T15557] futex_wake+0xea/0x530 [ 598.833517][T15557] ? __pfx_futex_wake+0x10/0x10 [ 598.833564][T15557] do_futex+0x1e3/0x350 [ 598.833596][T15557] ? __pfx_do_futex+0x10/0x10 [ 598.833628][T15557] ? find_held_lock+0x2b/0x80 [ 598.833661][T15557] __x64_sys_futex+0x1e0/0x4c0 [ 598.833693][T15557] ? __do_sys_close_range+0x278/0x730 [ 598.833721][T15557] ? __pfx___x64_sys_futex+0x10/0x10 [ 598.833756][T15557] ? syscall_user_dispatch+0x78/0x140 [ 598.833788][T15557] do_syscall_64+0xcd/0xfa0 [ 598.833819][T15557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.833843][T15557] RIP: 0033:0x7fe04e58f749 [ 598.833864][T15557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 598.833885][T15557] RSP: 002b:00007fe04f3410e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 598.833909][T15557] RAX: ffffffffffffffda RBX: 00007fe04e7e5fa8 RCX: 00007fe04e58f749 [ 598.833925][T15557] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe04e7e5fac [ 598.833942][T15557] RBP: 00007fe04e7e5fa0 R08: 00007fe04f342000 R09: 0000000000000000 [ 598.833958][T15557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 598.833975][T15557] R13: 00007fe04e7e6038 R14: 00007ffc080c9c00 R15: 00007ffc080c9ce8 [ 598.834012][T15557] [ 599.369948][ T30] audit: type=1800 audit(4294967701.850:17): pid=15577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=53166 res=0 errno=0 [ 600.155542][T15328] Bluetooth: hci5: command tx timeout [ 601.786848][T15620] bridge0: port 2(bond0) entered blocking state [ 601.796175][T15620] bridge0: port 2(bond0) entered disabled state [ 601.803485][T15620] bond0: entered allmulticast mode [ 601.809107][T15620] bond_slave_0: entered allmulticast mode [ 601.816003][T15620] bond_slave_1: entered allmulticast mode [ 601.825773][T15620] bond0: entered promiscuous mode [ 601.831313][T15620] bond_slave_0: entered promiscuous mode [ 601.839669][T15620] bond_slave_1: entered promiscuous mode [ 601.847717][T15620] bridge0: port 2(bond0) entered blocking state [ 601.854351][T15620] bridge0: port 2(bond0) entered forwarding state [ 602.155956][T15630] netlink: 266 bytes leftover after parsing attributes in process `syz.2.2155'. [ 602.421244][T15641] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 602.512504][T15641] CIFS mount error: No usable UNC path provided in device string! [ 602.512504][T15641] [ 602.748204][T15641] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 603.019458][T15653] Console: switching to colour VGA+ 80x25 [ 603.052062][T15653] FAULT_INJECTION: forcing a failure. [ 603.052062][T15653] name failslab, interval 1, probability 0, space 0, times 0 [ 603.068013][T15653] CPU: 0 UID: 0 PID: 15653 Comm: syz.2.2159 Not tainted syzkaller #0 PREEMPT(full) [ 603.068050][T15653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 603.068071][T15653] Call Trace: [ 603.068080][T15653] [ 603.068090][T15653] dump_stack_lvl+0x16c/0x1f0 [ 603.068130][T15653] should_fail_ex+0x512/0x640 [ 603.068167][T15653] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 603.068197][T15653] should_failslab+0xc2/0x120 [ 603.068234][T15653] kmem_cache_alloc_noprof+0x75/0x6e0 [ 603.068260][T15653] ? vm_area_dup+0x27/0x8d0 [ 603.068290][T15653] ? vm_area_dup+0x27/0x8d0 [ 603.068311][T15653] vm_area_dup+0x27/0x8d0 [ 603.068336][T15653] copy_vma+0x4ef/0xa90 [ 603.068368][T15653] ? __pfx_copy_vma+0x10/0x10 [ 603.068418][T15653] ? rcu_is_watching+0x12/0xc0 [ 603.068450][T15653] ? finish_task_switch.isra.0+0x221/0xc10 [ 603.068483][T15653] copy_vma_and_data+0x1cf/0x790 [ 603.068515][T15653] ? __pfx_copy_vma_and_data+0x10/0x10 [ 603.068550][T15653] ? __vma_enter_locked+0x163/0x3f0 [ 603.068590][T15653] ? find_held_lock+0x2b/0x80 [ 603.068614][T15653] ? move_vma+0x52e/0x1770 [ 603.068634][T15653] ? __vm_enough_memory+0x184/0x3f0 [ 603.068666][T15653] move_vma+0x540/0x1770 [ 603.068683][T15653] ? __pfx_move_vma+0x10/0x10 [ 603.068699][T15653] ? mm_get_unmapped_area_vmflags+0x97/0xe0 [ 603.068718][T15653] ? cap_mmap_addr+0x4b/0x120 [ 603.068736][T15653] ? bpf_lsm_mmap_addr+0x9/0x10 [ 603.068751][T15653] ? security_mmap_addr+0x6c/0x1e0 [ 603.068765][T15653] ? __get_unmapped_area+0x267/0x440 [ 603.068784][T15653] ? vrm_set_new_addr+0x208/0x290 [ 603.068799][T15653] mremap_to+0x1b7/0x450 [ 603.068814][T15653] do_mremap+0x13a8/0x2020 [ 603.068831][T15653] ? futex_private_hash_put+0x50/0x190 [ 603.068853][T15653] ? __pfx_do_mremap+0x10/0x10 [ 603.068872][T15653] ? do_vfs_ioctl+0x128/0x14f0 [ 603.068895][T15653] __do_sys_mremap+0x119/0x170 [ 603.068909][T15653] ? __pfx___do_sys_mremap+0x10/0x10 [ 603.068923][T15653] ? find_held_lock+0x2b/0x80 [ 603.068957][T15653] ? __x64_sys_futex+0x1e0/0x4c0 [ 603.069001][T15653] ? fput+0x9b/0xd0 [ 603.069038][T15653] do_syscall_64+0xcd/0xfa0 [ 603.069066][T15653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.069082][T15653] RIP: 0033:0x7fe04e58f749 [ 603.069094][T15653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 603.069107][T15653] RSP: 002b:00007fe04c7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 603.069121][T15653] RAX: ffffffffffffffda RBX: 00007fe04e7e6090 RCX: 00007fe04e58f749 [ 603.069130][T15653] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 603.069138][T15653] RBP: 00007fe04e613f91 R08: 0000000100000000 R09: 0000000000000000 [ 603.069147][T15653] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 603.069155][T15653] R13: 00007fe04e7e6128 R14: 00007fe04e7e6090 R15: 00007ffc080c9ce8 [ 603.069175][T15653] [ 603.357344][ C0] vkms_vblank_simulate: vblank timer overrun [ 603.468377][T15656] FAULT_INJECTION: forcing a failure. [ 603.468377][T15656] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 603.546893][T15656] CPU: 1 UID: 0 PID: 15656 Comm: syz.6.2160 Not tainted syzkaller #0 PREEMPT(full) [ 603.546932][T15656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 603.546949][T15656] Call Trace: [ 603.546957][T15656] [ 603.546967][T15656] dump_stack_lvl+0x16c/0x1f0 [ 603.547008][T15656] should_fail_ex+0x512/0x640 [ 603.547054][T15656] should_fail_alloc_page+0xe7/0x130 [ 603.547100][T15656] prepare_alloc_pages+0x3c2/0x610 [ 603.547143][T15656] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 603.547176][T15656] ? security_file_ioctl+0x9b/0x240 [ 603.547202][T15656] ? __x64_sys_ioctl+0xb7/0x210 [ 603.547237][T15656] ? do_syscall_64+0xcd/0xfa0 [ 603.547272][T15656] ? kasan_save_stack+0x42/0x60 [ 603.547301][T15656] ? kasan_save_stack+0x33/0x60 [ 603.547330][T15656] ? kasan_save_track+0x14/0x30 [ 603.547358][T15656] ? __kasan_kmalloc+0xaa/0xb0 [ 603.547386][T15656] ? __kmalloc_noprof+0x32f/0x880 [ 603.547423][T15656] ? vhost_dev_set_owner+0x287/0xa50 [ 603.547453][T15656] ? vhost_net_ioctl+0xe1e/0x1840 [ 603.547477][T15656] ? __x64_sys_ioctl+0x18e/0x210 [ 603.547514][T15656] ? do_syscall_64+0xcd/0xfa0 [ 603.547547][T15656] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 603.547603][T15656] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 603.547648][T15656] ? policy_nodemask+0xea/0x4e0 [ 603.547686][T15656] alloc_pages_mpol+0x1fb/0x550 [ 603.547724][T15656] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 603.547769][T15656] ___kmalloc_large_node+0xed/0x160 [ 603.547810][T15656] __kmalloc_large_noprof+0x1c/0x70 [ 603.547847][T15656] vhost_dev_set_owner+0x3af/0xa50 [ 603.547891][T15656] vhost_net_ioctl+0xe1e/0x1840 [ 603.547916][T15656] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 603.547956][T15656] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 603.547988][T15656] ? find_held_lock+0x2b/0x80 [ 603.548015][T15656] ? hook_file_ioctl_common+0x145/0x410 [ 603.548052][T15656] ? __fget_files+0x20e/0x3c0 [ 603.548085][T15656] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 603.548122][T15656] __x64_sys_ioctl+0x18e/0x210 [ 603.548165][T15656] do_syscall_64+0xcd/0xfa0 [ 603.548202][T15656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.548230][T15656] RIP: 0033:0x7f429eb8f749 [ 603.548253][T15656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 603.548281][T15656] RSP: 002b:00007f429fad2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 603.548307][T15656] RAX: ffffffffffffffda RBX: 00007f429ede5fa0 RCX: 00007f429eb8f749 [ 603.548326][T15656] RDX: 0000000000000005 RSI: 000000000000af01 RDI: 0000000000000004 [ 603.548342][T15656] RBP: 00007f429ec13f91 R08: 0000000000000000 R09: 0000000000000000 [ 603.548360][T15656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 603.548386][T15656] R13: 00007f429ede6038 R14: 00007f429ede5fa0 R15: 00007ffc14670428 [ 603.548427][T15656] [ 604.200808][T15667] netlink: 266 bytes leftover after parsing attributes in process `syz.2.2165'. [ 604.367403][T15674] usb usb36: usbfs: process 15674 (syz.2.2166) did not claim interface 0 before use [ 605.415900][T15693] bond0: invalid ARP target specified [ 605.501153][T15693] svc: failed to register nfsdv3 RPC service (errno 111). [ 605.510989][T15693] svc: failed to register nfsaclv3 RPC service (errno 111). [ 607.156051][T15721] Invalid ELF header magic: != ELF [ 608.181366][T15709] kexec: Could not allocate control_code_buffer [ 608.824977][T15747] bridge0: port 3(bond0) entered blocking state [ 608.831682][T15747] bridge0: port 3(bond0) entered disabled state [ 608.861972][T15747] bond0: entered allmulticast mode [ 608.936375][T15747] bond_slave_0: entered allmulticast mode [ 608.953885][T15747] bond_slave_1: entered allmulticast mode [ 608.967422][T15747] bond0: entered promiscuous mode [ 608.977733][T15747] bond_slave_0: entered promiscuous mode [ 608.992468][T15747] bond_slave_1: entered promiscuous mode [ 609.008440][T15747] bridge0: port 3(bond0) entered blocking state [ 609.014968][T15747] bridge0: port 3(bond0) entered forwarding state [ 609.345357][T15329] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 609.363453][T15329] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 609.375222][T15329] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 609.383981][T15329] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 609.392364][T15329] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 609.714366][T15761] FAULT_INJECTION: forcing a failure. [ 609.714366][T15761] name failslab, interval 1, probability 0, space 0, times 0 [ 609.742375][T15761] CPU: 1 UID: 0 PID: 15761 Comm: syz.7.2191 Not tainted syzkaller #0 PREEMPT(full) [ 609.742413][T15761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 609.742430][T15761] Call Trace: [ 609.742439][T15761] [ 609.742449][T15761] dump_stack_lvl+0x16c/0x1f0 [ 609.742505][T15761] should_fail_ex+0x512/0x640 [ 609.742550][T15761] ? __kmalloc_noprof+0xca/0x880 [ 609.742603][T15761] should_failslab+0xc2/0x120 [ 609.742640][T15761] __kmalloc_noprof+0xdd/0x880 [ 609.742681][T15761] ? realloc_user_queue+0x288/0x320 [ 609.742732][T15761] ? realloc_user_queue+0x288/0x320 [ 609.742775][T15761] realloc_user_queue+0x288/0x320 [ 609.742828][T15761] ? __pfx_snd_timer_user_open+0x10/0x10 [ 609.742872][T15761] snd_timer_user_open+0xfc/0x180 [ 609.742911][T15761] snd_open+0x22d/0x4c0 [ 609.742946][T15761] ? __pfx_snd_open+0x10/0x10 [ 609.742976][T15761] chrdev_open+0x234/0x6a0 [ 609.743011][T15761] ? __pfx_apparmor_file_open+0x10/0x10 [ 609.743061][T15761] ? __pfx_chrdev_open+0x10/0x10 [ 609.743101][T15761] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 609.743139][T15761] do_dentry_open+0x982/0x1530 [ 609.743170][T15761] ? __pfx_chrdev_open+0x10/0x10 [ 609.743207][T15761] vfs_open+0x82/0x3f0 [ 609.743249][T15761] path_openat+0x1de4/0x2cb0 [ 609.743288][T15761] ? __pfx_path_openat+0x10/0x10 [ 609.743318][T15761] ? __lock_acquire+0xb8a/0x1c90 [ 609.743356][T15761] do_filp_open+0x20b/0x470 [ 609.743385][T15761] ? __pfx_do_filp_open+0x10/0x10 [ 609.743441][T15761] ? alloc_fd+0x471/0x7d0 [ 609.743477][T15761] do_sys_openat2+0x11b/0x1d0 [ 609.743527][T15761] ? __pfx_do_sys_openat2+0x10/0x10 [ 609.743579][T15761] __x64_sys_openat+0x174/0x210 [ 609.743618][T15761] ? __pfx___x64_sys_openat+0x10/0x10 [ 609.743662][T15761] do_syscall_64+0xcd/0xfa0 [ 609.743694][T15761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.743711][T15761] RIP: 0033:0x7f129ed8f749 [ 609.743725][T15761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 609.743739][T15761] RSP: 002b:00007f129fc83038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 609.743754][T15761] RAX: ffffffffffffffda RBX: 00007f129efe5fa0 RCX: 00007f129ed8f749 [ 609.743765][T15761] RDX: 0000000000000001 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 609.743775][T15761] RBP: 00007f129ee13f91 R08: 0000000000000000 R09: 0000000000000000 [ 609.743784][T15761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 609.743793][T15761] R13: 00007f129efe6038 R14: 00007f129efe5fa0 R15: 00007ffd4226e3a8 [ 609.743824][T15761] [ 610.374051][T15754] chnl_net:caif_netlink_parms(): no params data found [ 610.446497][T15774] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2194'. [ 611.113965][T15754] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.121086][T15754] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.137614][T15764] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2192'. [ 611.174399][T15754] bridge_slave_0: entered allmulticast mode [ 611.181779][T15754] bridge_slave_0: entered promiscuous mode [ 611.229291][T15754] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.279585][T15754] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.375721][T15754] bridge_slave_1: entered allmulticast mode [ 611.408269][T15754] bridge_slave_1: entered promiscuous mode [ 611.432522][T15329] Bluetooth: hci6: command tx timeout [ 611.527701][T15789] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.128.4294967291), cmd(3) [ 611.652191][T15754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 611.752378][T15754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 611.995779][T15754] team0: Port device team_slave_0 added [ 612.027297][T15754] team0: Port device team_slave_1 added [ 612.167585][T15754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 612.185605][T15754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.258561][T15754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 612.288099][T15754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 612.305911][T15754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.414780][T15754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 612.535220][T15754] hsr_slave_0: entered promiscuous mode [ 612.553498][T15754] hsr_slave_1: entered promiscuous mode [ 612.560050][T15754] debugfs: 'hsr0' already exists in 'hsr' [ 612.566471][T15754] Cannot create hsr debugfs directory [ 612.656256][T15812] FAULT_INJECTION: forcing a failure. [ 612.656256][T15812] name fail_futex, interval 1, probability 0, space 0, times 0 [ 612.669246][T15812] CPU: 0 UID: 0 PID: 15812 Comm: syz.2.2201 Not tainted syzkaller #0 PREEMPT(full) [ 612.669277][T15812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 612.669299][T15812] Call Trace: [ 612.669307][T15812] [ 612.669321][T15812] dump_stack_lvl+0x16c/0x1f0 [ 612.669365][T15812] should_fail_ex+0x512/0x640 [ 612.669404][T15812] get_futex_key+0x1d0/0x1560 [ 612.669444][T15812] ? __pfx_get_futex_key+0x10/0x10 [ 612.669478][T15812] ? __pfx___schedule+0x10/0x10 [ 612.669502][T15812] ? trace_sched_set_need_resched_tp+0xf3/0x150 [ 612.669535][T15812] futex_wait_setup+0x9d/0x550 [ 612.669567][T15812] __futex_wait+0x193/0x2f0 [ 612.669591][T15812] ? __pfx___futex_wait+0x10/0x10 [ 612.669620][T15812] ? __pfx_futex_wake_mark+0x10/0x10 [ 612.669664][T15812] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 612.669699][T15812] ? __hrtimer_setup+0x176/0x280 [ 612.669737][T15812] ? ktime_add_safe+0x60/0x70 [ 612.669778][T15812] futex_wait+0xe8/0x380 [ 612.669801][T15812] ? __pfx_futex_wait+0x10/0x10 [ 612.669823][T15812] ? __lock_acquire+0xb8a/0x1c90 [ 612.669859][T15812] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 612.669907][T15812] do_futex+0x229/0x350 [ 612.669940][T15812] ? __pfx_do_futex+0x10/0x10 [ 612.669969][T15812] ? rcu_is_watching+0x12/0xc0 [ 612.669995][T15812] ? ktime_get+0x200/0x310 [ 612.670024][T15812] ? lockdep_hardirqs_on+0x7c/0x110 [ 612.670054][T15812] ? read_tsc+0x9/0x20 [ 612.670087][T15812] __x64_sys_futex+0x1e0/0x4c0 [ 612.670125][T15812] ? __pfx___x64_sys_futex+0x10/0x10 [ 612.670160][T15812] ? xfd_validate_state+0x61/0x180 [ 612.670206][T15812] do_syscall_64+0xcd/0xfa0 [ 612.670247][T15812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.670273][T15812] RIP: 0033:0x7fe04e58f749 [ 612.670298][T15812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 612.670322][T15812] RSP: 002b:00007ffc080c9e48 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 612.670347][T15812] RAX: ffffffffffffffda RBX: 0000000000095906 RCX: 00007fe04e58f749 [ 612.670365][T15812] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe04e7e5fac [ 612.670380][T15812] RBP: 0000000000000032 R08: 00007fe04f342000 R09: 00000011080ca13f [ 612.670394][T15812] R10: 00007ffc080c9f40 R11: 0000000000000246 R12: 00007fe04e7e5fac [ 612.670409][T15812] R13: 00007ffc080c9f40 R14: 0000000000095938 R15: 00007ffc080c9f60 [ 612.670445][T15812] [ 613.428004][T15754] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 613.469306][T15754] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 613.513551][T15329] Bluetooth: hci6: command tx timeout [ 613.538962][T15754] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 613.591622][T15754] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 613.895891][T15754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 613.951734][T15754] 8021q: adding VLAN 0 to HW filter on device team0 [ 614.054344][T14626] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.061528][T14626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.129116][T15216] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.136354][T15216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 614.349718][T15754] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 614.462134][T15754] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 614.548445][T15846] could not allocate digest TFM handle [ 615.043412][T15846] could not allocate digest TFM handle [ 615.359068][T15754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 615.373035][T15873] netlink: 266 bytes leftover after parsing attributes in process `syz.2.2205'. [ 615.596702][T15329] Bluetooth: hci6: command tx timeout [ 615.791145][T15754] veth0_vlan: entered promiscuous mode [ 615.807368][T15754] veth1_vlan: entered promiscuous mode [ 615.872848][T15754] veth0_macvtap: entered promiscuous mode [ 615.885165][T15754] veth1_macvtap: entered promiscuous mode [ 615.914857][T15754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 615.966886][T15754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 616.004061][T14699] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.016185][T14699] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.030921][T14699] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.041683][T14699] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.153161][T14626] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.161600][T14626] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.204872][T14633] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.224457][T14633] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.498627][T15893] Unable to find swap-space signature [ 617.559868][T15328] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 617.569366][T15328] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 617.578560][T15328] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 617.586684][T15328] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 617.596078][T15328] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 617.672711][T15329] Bluetooth: hci6: command tx timeout [ 617.925044][T15904] chnl_net:caif_netlink_parms(): no params data found [ 617.966049][T15909] netlink: 266 bytes leftover after parsing attributes in process `syz.8.2213'. [ 617.975775][T15909] IPv6: NLM_F_CREATE should be specified when creating new route [ 618.076177][T15904] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.084256][T15904] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.091605][T15904] bridge_slave_0: entered allmulticast mode [ 618.100118][T15904] bridge_slave_0: entered promiscuous mode [ 618.110450][T15904] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.118589][T15904] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.128055][T15904] bridge_slave_1: entered allmulticast mode [ 618.137015][T15904] bridge_slave_1: entered promiscuous mode [ 618.196707][T15904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 618.211088][T15904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 618.288113][T15904] team0: Port device team_slave_0 added [ 618.298768][T15904] team0: Port device team_slave_1 added [ 618.345781][T15904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 618.353624][T15904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 618.382140][T15904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 618.403756][T15904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 618.413774][T15904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 618.440859][T15904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 618.571713][T15904] hsr_slave_0: entered promiscuous mode [ 618.579832][T15904] hsr_slave_1: entered promiscuous mode [ 618.586387][T15904] debugfs: 'hsr0' already exists in 'hsr' [ 618.592436][T15904] Cannot create hsr debugfs directory [ 618.865634][T15904] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.114580][T15935] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input15 [ 619.673092][T15329] Bluetooth: hci2: command tx timeout [ 621.753600][T15329] Bluetooth: hci2: command tx timeout [ 623.832026][T15329] Bluetooth: hci2: command tx timeout [ 624.394430][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.400863][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.573882][T15328] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 625.583948][T15328] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 625.594457][T15328] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 625.602969][T15328] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 625.610639][T15328] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 625.773993][T15944] chnl_net:caif_netlink_parms(): no params data found [ 625.849601][T15944] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.857125][T15944] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.864636][T15944] bridge_slave_0: entered allmulticast mode [ 625.871701][T15944] bridge_slave_0: entered promiscuous mode [ 625.879907][T15944] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.887928][T15944] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.895393][T15944] bridge_slave_1: entered allmulticast mode [ 625.905677][T15944] bridge_slave_1: entered promiscuous mode [ 625.922278][T15328] Bluetooth: hci2: command tx timeout [ 625.943185][T15944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 625.958259][T15944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 625.989604][T15944] team0: Port device team_slave_0 added [ 625.998986][T15944] team0: Port device team_slave_1 added [ 626.028071][T15944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 626.035216][T15944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 626.063844][T15944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 626.077457][T15944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 626.084648][T15944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 626.111223][T15944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 626.158963][T15944] hsr_slave_0: entered promiscuous mode [ 626.166172][T15944] hsr_slave_1: entered promiscuous mode [ 626.172718][T15944] debugfs: 'hsr0' already exists in 'hsr' [ 626.178455][T15944] Cannot create hsr debugfs directory [ 627.322552][T15963] netlink: 330 bytes leftover after parsing attributes in process `syz.8.2224'. [ 627.343038][T15963] FAULT_INJECTION: forcing a failure. [ 627.343038][T15963] name failslab, interval 1, probability 0, space 0, times 0 [ 627.357168][T15963] CPU: 0 UID: 0 PID: 15963 Comm: syz.8.2224 Not tainted syzkaller #0 PREEMPT(full) [ 627.357191][T15963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 627.357200][T15963] Call Trace: [ 627.357206][T15963] [ 627.357213][T15963] dump_stack_lvl+0x16c/0x1f0 [ 627.357236][T15963] should_fail_ex+0x512/0x640 [ 627.357256][T15963] ? fs_reclaim_acquire+0xae/0x150 [ 627.357277][T15963] should_failslab+0xc2/0x120 [ 627.357297][T15963] __kmalloc_cache_noprof+0x72/0x780 [ 627.357311][T15963] ? tomoyo_open_control+0x56/0xa30 [ 627.357329][T15963] ? __pfx_apparmor_file_open+0x10/0x10 [ 627.357351][T15963] ? tomoyo_open_control+0x56/0xa30 [ 627.357368][T15963] tomoyo_open_control+0x56/0xa30 [ 627.357388][T15963] do_dentry_open+0x982/0x1530 [ 627.357405][T15963] ? __pfx_tomoyo_open+0x10/0x10 [ 627.357425][T15963] vfs_open+0x82/0x3f0 [ 627.357454][T15963] path_openat+0x1de4/0x2cb0 [ 627.357477][T15963] ? __pfx_path_openat+0x10/0x10 [ 627.357496][T15963] ? __lock_acquire+0xb8a/0x1c90 [ 627.357518][T15963] do_filp_open+0x20b/0x470 [ 627.357533][T15963] ? __pfx_do_filp_open+0x10/0x10 [ 627.357562][T15963] ? alloc_fd+0x471/0x7d0 [ 627.357581][T15963] do_sys_openat2+0x11b/0x1d0 [ 627.357600][T15963] ? __pfx_do_sys_openat2+0x10/0x10 [ 627.357627][T15963] __x64_sys_openat+0x174/0x210 [ 627.357647][T15963] ? __pfx___x64_sys_openat+0x10/0x10 [ 627.357673][T15963] do_syscall_64+0xcd/0xfa0 [ 627.357692][T15963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.357705][T15963] RIP: 0033:0x7ff9c0f8f749 [ 627.357718][T15963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 627.357732][T15963] RSP: 002b:00007ff9c1dc4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 627.357745][T15963] RAX: ffffffffffffffda RBX: 00007ff9c11e5fa0 RCX: 00007ff9c0f8f749 [ 627.357755][T15963] RDX: 0000000000040282 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 627.357764][T15963] RBP: 00007ff9c1013f91 R08: 0000000000000000 R09: 0000000000000000 [ 627.357774][T15963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 627.357782][T15963] R13: 00007ff9c11e6038 R14: 00007ff9c11e5fa0 R15: 00007ffebf8b9858 [ 627.357802][T15963] [ 627.672111][T15328] Bluetooth: hci7: command tx timeout [ 627.847920][T15969] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 629.581641][T15329] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 629.591270][T15329] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 629.600455][T15329] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 629.608378][T15329] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 629.617056][T15329] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 629.752269][T15329] Bluetooth: hci7: command tx timeout [ 629.878278][T15979] chnl_net:caif_netlink_parms(): no params data found [ 629.958515][T15979] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.970626][T15979] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.978187][T15979] bridge_slave_0: entered allmulticast mode [ 630.009835][T15979] bridge_slave_0: entered promiscuous mode [ 630.018692][T15979] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.038725][T15979] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.050763][T15979] bridge_slave_1: entered allmulticast mode [ 630.063295][T15979] bridge_slave_1: entered promiscuous mode [ 630.119085][T15979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 630.135327][T15979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 630.185404][T15979] team0: Port device team_slave_0 added [ 630.196173][T15979] team0: Port device team_slave_1 added [ 630.249770][T15979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 630.259903][T15979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 630.287536][T15979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 630.300360][T15979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 630.307658][T15979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 630.371632][T15979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 630.430443][T15979] hsr_slave_0: entered promiscuous mode [ 630.437471][T15979] hsr_slave_1: entered promiscuous mode [ 630.453038][T15979] debugfs: 'hsr0' already exists in 'hsr' [ 630.461257][T15979] Cannot create hsr debugfs directory [ 630.907750][T15994] netlink: 206 bytes leftover after parsing attributes in process `syz.8.2230'. [ 631.672502][T15329] Bluetooth: hci8: command tx timeout [ 631.832122][T15329] Bluetooth: hci7: command tx timeout [ 632.016018][T16003] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 632.311436][T16008] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input16 [ 632.694577][T16009] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input17 [ 633.752238][T15329] Bluetooth: hci8: command tx timeout [ 633.787344][T16018] snd_dummy snd_dummy.0: control 16781581:65539:6:'x?F/zF˷fC:7 is already present [ 633.922772][T15329] Bluetooth: hci7: command tx timeout [ 635.832413][T15329] Bluetooth: hci8: command tx timeout [ 637.721397][T16047] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2242'. [ 637.912664][T15329] Bluetooth: hci8: command tx timeout [ 678.153188][T15328] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 678.163501][T15328] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 678.175569][T15328] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 678.184637][T15328] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 678.192599][T15328] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 678.347455][T16054] chnl_net:caif_netlink_parms(): no params data found [ 678.418678][T16054] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.426240][T16054] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.433871][T16054] bridge_slave_0: entered allmulticast mode [ 678.441535][T16054] bridge_slave_0: entered promiscuous mode [ 678.449754][T16054] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.457057][T16054] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.464917][T16054] bridge_slave_1: entered allmulticast mode [ 678.474127][T16054] bridge_slave_1: entered promiscuous mode [ 678.505239][T16054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 678.517210][T16054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 678.551780][T16054] team0: Port device team_slave_0 added [ 678.560626][T16054] team0: Port device team_slave_1 added [ 678.590466][T16054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 678.597558][T16054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 678.624173][T16054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 678.636951][T16054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 678.644183][T16054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 678.671942][T16054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 678.714638][T16054] hsr_slave_0: entered promiscuous mode [ 678.721212][T16054] hsr_slave_1: entered promiscuous mode [ 678.728109][T16054] debugfs: 'hsr0' already exists in 'hsr' [ 678.733912][T16054] Cannot create hsr debugfs directory [ 680.242077][T15329] Bluetooth: hci9: command tx timeout [ 682.312383][T15329] Bluetooth: hci9: command tx timeout [ 684.402204][T15329] Bluetooth: hci9: command tx timeout [ 685.636981][T15328] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 685.649044][T15328] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 685.658685][T15328] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 685.666871][T15328] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 685.676266][T15328] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 685.829944][T16064] chnl_net:caif_netlink_parms(): no params data found [ 685.843193][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.850097][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.923350][T16064] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.930548][T16064] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.938320][T16064] bridge_slave_0: entered allmulticast mode [ 685.945830][T16064] bridge_slave_0: entered promiscuous mode [ 685.960252][T16064] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.967751][T16064] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.975167][T16064] bridge_slave_1: entered allmulticast mode [ 685.983100][T16064] bridge_slave_1: entered promiscuous mode [ 686.016359][T16064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 686.028391][T16064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 686.063300][T16064] team0: Port device team_slave_0 added [ 686.071549][T16064] team0: Port device team_slave_1 added [ 686.099030][T16064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 686.106083][T16064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 686.132327][T16064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 686.144428][T16064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 686.151772][T16064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 686.179759][T16064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 686.221962][T16064] hsr_slave_0: entered promiscuous mode [ 686.228603][T16064] hsr_slave_1: entered promiscuous mode [ 686.235132][T16064] debugfs: 'hsr0' already exists in 'hsr' [ 686.240866][T16064] Cannot create hsr debugfs directory [ 686.482710][T15328] Bluetooth: hci9: command tx timeout [ 687.752274][T15328] Bluetooth: hci10: command tx timeout [ 689.629807][T15329] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 689.644992][T15329] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 689.654143][T15329] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 689.664337][T15329] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 689.672758][T15329] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 689.825610][T16075] chnl_net:caif_netlink_parms(): no params data found [ 689.833524][T15328] Bluetooth: hci10: command tx timeout [ 689.905943][T16075] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.913564][T16075] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.920982][T16075] bridge_slave_0: entered allmulticast mode [ 689.928567][T16075] bridge_slave_0: entered promiscuous mode [ 689.937853][T16075] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.945858][T16075] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.954380][T16075] bridge_slave_1: entered allmulticast mode [ 689.961450][T16075] bridge_slave_1: entered promiscuous mode [ 689.989801][T16075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 690.002709][T16075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 690.034071][T16075] team0: Port device team_slave_0 added [ 690.042931][T16075] team0: Port device team_slave_1 added [ 690.073293][T16075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 690.080263][T16075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 690.107055][T16075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 690.119593][T16075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 690.126849][T16075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 690.153607][T16075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 690.196537][T16075] hsr_slave_0: entered promiscuous mode [ 690.203042][T16075] hsr_slave_1: entered promiscuous mode [ 690.209312][T16075] debugfs: 'hsr0' already exists in 'hsr' [ 690.215130][T16075] Cannot create hsr debugfs directory [ 691.752434][T15328] Bluetooth: hci11: command tx timeout [ 691.912179][T15328] Bluetooth: hci10: command tx timeout [ 693.842424][T15328] Bluetooth: hci11: command tx timeout [ 693.992134][T15328] Bluetooth: hci10: command tx timeout [ 695.912304][T15328] Bluetooth: hci11: command tx timeout [ 697.992205][T15328] Bluetooth: hci11: command tx timeout [ 715.272287][ T31] INFO: task kworker/u8:3:50 blocked for more than 143 seconds. [ 715.279983][ T31] Not tainted syzkaller #0 [ 715.286875][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 715.295628][ T31] task:kworker/u8:3 state:D stack:24376 pid:50 tgid:50 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 715.307954][ T31] Workqueue: netns cleanup_net [ 715.312832][ T31] Call Trace: [ 715.316126][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 715.319074][ T31] __schedule+0x1190/0x5de0 [ 715.323750][ T31] ? __lock_acquire+0x622/0x1c90 [ 715.328819][ T31] ? __pfx___schedule+0x10/0x10 [ 715.333781][ T31] ? find_held_lock+0x2b/0x80 [ 715.340902][ T31] ? schedule+0x2d7/0x3a0 [ 715.347240][ T31] schedule+0xe7/0x3a0 [ 715.351416][ T31] schedule_timeout+0x257/0x290 [ 715.363189][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 715.368640][ T31] ? mark_held_locks+0x49/0x80 [ 715.373544][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 715.378785][ T31] __wait_for_common+0x2fc/0x4e0 [ 715.384097][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 715.389592][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 715.395188][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 715.400417][ T31] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 715.406496][ T31] __flush_workqueue+0x3e2/0x1230 [ 715.411574][ T31] ? find_held_lock+0x2b/0x80 [ 715.416427][ T31] ? find_held_lock+0x2b/0x80 [ 715.421151][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 715.426828][ T31] ? __queue_work+0x431/0x1160 [ 715.431673][ T31] ? queue_work_on+0x12a/0x1f0 [ 715.436553][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 715.444356][ T31] rxrpc_destroy_all_connections+0xed/0x440 [ 715.452399][ T31] ? __pfx_rxrpc_destroy_all_connections+0x10/0x10 [ 715.459040][ T31] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 715.470500][ T31] rxrpc_exit_net+0x7b/0xc0 [ 715.477077][ T31] ? __pfx_rxrpc_exit_net+0x10/0x10 [ 715.482451][ T31] ops_undo_list+0x2ee/0xab0 [ 715.487090][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 715.492282][ T31] ? cleanup_net+0x347/0x8b0 [ 715.496897][ T31] ? idr_destroy+0x62/0x2e0 [ 715.501434][ T31] cleanup_net+0x41b/0x8b0 [ 715.506035][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 715.511001][ T31] ? rcu_is_watching+0x12/0xc0 [ 715.515983][ T31] process_one_work+0x9cf/0x1b70 [ 715.520973][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 715.542257][ T31] ? __pfx_process_one_work+0x10/0x10 [ 715.547728][ T31] ? assign_work+0x1a0/0x250 [ 715.577168][ T31] worker_thread+0x6c8/0xf10 [ 715.591949][ T31] ? __kthread_parkme+0x19e/0x250 [ 715.597043][ T31] ? __pfx_worker_thread+0x10/0x10 [ 715.621917][ T31] kthread+0x3c5/0x780 [ 715.626079][ T31] ? __pfx_kthread+0x10/0x10 [ 715.630725][ T31] ? rcu_is_watching+0x12/0xc0 [ 715.635642][ T31] ? __pfx_kthread+0x10/0x10 [ 715.640272][ T31] ret_from_fork+0x675/0x7d0 [ 715.647477][ T31] ? __pfx_kthread+0x10/0x10 [ 715.652253][ T31] ret_from_fork_asm+0x1a/0x30 [ 715.658822][ T31] [ 715.662132][ T31] INFO: task syz.1.1974:14768 blocked for more than 143 seconds. [ 715.669929][ T31] Not tainted syzkaller #0 [ 715.675041][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 715.688615][ T31] task:syz.1.1974 state:D stack:26808 pid:14768 tgid:14767 ppid:5823 task_flags:0x400140 flags:0x00080003 [ 715.704201][ T31] Call Trace: [ 715.707537][ T31] [ 715.710485][ T31] __schedule+0x1190/0x5de0 [ 715.715443][ T31] ? __lock_acquire+0x622/0x1c90 [ 715.720425][ T31] ? __pfx___schedule+0x10/0x10 [ 715.725593][ T31] ? find_held_lock+0x2b/0x80 [ 715.730296][ T31] ? schedule+0x2d7/0x3a0 [ 715.735029][ T31] schedule+0xe7/0x3a0 [ 715.739126][ T31] schedule_timeout+0x257/0x290 [ 715.744258][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 715.752453][ T31] ? mark_held_locks+0x49/0x80 [ 715.758787][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 715.764462][ T31] __wait_for_common+0x2fc/0x4e0 [ 715.769435][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 715.775434][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 715.780925][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 715.786613][ T31] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 715.798992][ T31] __flush_workqueue+0x3e2/0x1230 [ 715.804453][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 715.809980][ T31] ? rxrpc_discard_prealloc+0xb6/0x9c0 [ 715.818404][ T31] ? rxrpc_release_calls_on_socket+0x237/0x4e0 [ 715.824989][ T31] rxrpc_release+0x2a7/0x6a0 [ 715.829643][ T31] sock_release+0x91/0x1d0 [ 715.834959][ T31] afs_open_socket+0x334/0x400 [ 715.839755][ T31] ? __pfx_afs_open_socket+0x10/0x10 [ 715.845536][ T31] ? proc_create_net_single_write+0x149/0x1b0 [ 715.854629][ T31] ? __pfx_proc_create_net_single_write+0x10/0x10 [ 715.862974][ T31] afs_net_init+0x825/0xb00 [ 715.867534][ T31] ? __pfx_afs_net_init+0x10/0x10 [ 715.873132][ T31] ops_init+0x1e2/0x5f0 [ 715.877326][ T31] setup_net+0x100/0x390 [ 715.881722][ T31] ? __pfx_setup_net+0x10/0x10 [ 715.887758][ T31] ? debug_mutex_init+0x37/0x70 [ 715.892867][ T31] copy_net_ns+0x2f8/0x690 [ 715.897339][ T31] create_new_namespaces+0x3ea/0xa90 [ 715.902760][ T31] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 715.908427][ T31] ksys_unshare+0x45b/0xa40 [ 715.913246][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 715.918463][ T31] ? __do_sys_rt_sigreturn+0x1da/0x2c0 [ 715.924124][ T31] __x64_sys_unshare+0x31/0x40 [ 715.928915][ T31] do_syscall_64+0xcd/0xfa0 [ 715.933742][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.939678][ T31] RIP: 0033:0x7fc38838f749 [ 715.944257][ T31] RSP: 002b:00007fc38921b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 715.953107][ T31] RAX: ffffffffffffffda RBX: 00007fc3885e5fa0 RCX: 00007fc38838f749 [ 715.962325][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 715.970621][ T31] RBP: 00007fc388413f91 R08: 0000000000000000 R09: 0000000000000000 [ 715.978684][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 715.986722][ T31] R13: 00007fc3885e6038 R14: 00007fc3885e5fa0 R15: 00007ffc2265aa48 [ 715.995137][ T31] [ 715.998424][ T31] [ 715.998424][ T31] Showing all locks held in the system: [ 716.006531][ T31] 2 locks held by ksoftirqd/1/23: [ 716.011667][ T31] 1 lock held by khungtaskd/31: [ 716.017915][ T31] #0: ffffffff8e3c45e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 716.030605][ T31] 3 locks held by kworker/u8:3/50: [ 716.035867][ T31] #0: ffff88801ba9f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 716.046428][ T31] #1: ffffc90000bb7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 716.056695][ T31] #2: ffffffff900d5010 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x8b0 [ 716.067268][ T31] 2 locks held by getty/6734: [ 716.072356][ T31] #0: ffff88814e1e00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 716.082647][ T31] #1: ffffc900192b12f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 716.092902][ T31] 1 lock held by syz.1.1974/14768: [ 716.098016][ T31] #0: ffffffff900d5010 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x2d6/0x690 [ 716.107559][ T31] 1 lock held by syz.5.2063/15194: [ 716.112715][ T31] #0: ffffffff900d5010 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x2d6/0x690 [ 716.122438][ T31] 4 locks held by kworker/u10:7/15216: [ 716.127916][ T31] #0: ffff8880b843a4d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 716.138136][ T31] #1: ffff8880b8424088 (psi_seq){-.-.}-{0:0}, at: __schedule+0x1861/0x5de0 [ 716.146942][ T31] #2: ffffffff9adb2dc8 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x14c/0x4c0 [ 716.157742][ T31] #3: ffffffff9acac3a0 (&obj_hash[i].lock){-.-.}-{2:2}, at: unwind_next_frame+0xbd/0x20a0 [ 716.168783][ T31] 1 lock held by syz.0.2124/15471: [ 716.173982][ T31] #0: ffffffff900d5010 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x2d6/0x690 [ 716.183543][ T31] 1 lock held by syz.0.2124/15472: [ 716.188648][ T31] #0: ffffffff900d5010 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x2d6/0x690 [ 716.198523][ T31] 3 locks held by syz-executor/15754: [ 716.203953][ T31] #0: ffff888055e40dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 716.213640][ T31] #1: ffff888055e400b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 716.223378][ T31] #2: ffffffff8e3cfb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 716.233758][ T31] 1 lock held by syz.7.2194/15774: [ 716.238900][ T31] #0: ffffffff9018f210 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 716.247443][ T31] 2 locks held by syz.7.2194/15778: [ 716.252706][ T31] #0: ffffffff900d5010 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x2d6/0x690 [ 716.262508][ T31] #1: ffffffff8e3cfa40 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 716.273366][ T31] 1 lock held by syz.6.2204/15844: [ 716.278495][ T31] #0: ffffffff900d5010 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x2d6/0x690 [ 716.288145][ T31] 7 locks held by syz-executor/15904: [ 716.293559][ T31] #0: ffff888034ee0420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 716.302856][ T31] #1: ffff8880345d1c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 716.313255][ T31] #2: ffff8881447e20f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 716.323446][ T31] #3: ffffffff8f66d208 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 716.333847][ T31] #4: ffff88807e1960e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xa4/0x620 [ 716.344482][ T31] #5: ffff88807e197250 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_drv_remove+0x4a/0x1d0 [ 716.354579][ T31] #6: ffffffff8e3cfa40 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 716.364879][ T31] 4 locks held by syz-executor/15944: [ 716.371152][ T31] #0: ffff888034ee0420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 716.380304][ T31] #1: ffff888028697888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 716.390213][ T31] #2: ffff8881447e20f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 716.400327][ T31] #3: ffffffff8f66d208 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 716.410721][ T31] 4 locks held by syz-executor/15979: [ 716.416448][ T31] #0: ffff888034ee0420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 716.425654][ T31] #1: ffff88808af01488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 716.435657][ T31] #2: ffff8881447e20f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 716.446244][ T31] #3: ffffffff8f66d208 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 716.456998][ T31] 4 locks held by syz-executor/16054: [ 716.463000][ T31] #0: ffff888034ee0420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 716.473582][ T31] #1: ffff888025fd4088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 716.483757][ T31] #2: ffff8881447e20f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 716.493931][ T31] #3: ffffffff8f66d208 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 716.504374][ T31] 4 locks held by syz-executor/16064: [ 716.509739][ T31] #0: ffff888034ee0420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 716.519152][ T31] #1: ffff888021e91088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 716.529132][ T31] #2: ffff8881447e20f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 716.539325][ T31] #3: ffffffff8f66d208 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 716.549682][ T31] 4 locks held by syz-executor/16075: [ 716.555300][ T31] #0: ffff888034ee0420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 716.564934][ T31] #1: ffff888064253088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 716.576120][ T31] #2: ffff8881447e20f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 716.586758][ T31] #3: ffffffff8f66d208 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 716.597419][ T31] [ 716.601938][ T31] ============================================= [ 716.601938][ T31] [ 716.626495][ T31] NMI backtrace for cpu 1 [ 716.626523][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 716.626554][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 716.626569][ T31] Call Trace: [ 716.626577][ T31] [ 716.626587][ T31] dump_stack_lvl+0x116/0x1f0 [ 716.626623][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 716.626658][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 716.626689][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 716.626724][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 716.626766][ T31] watchdog+0xf3f/0x1170 [ 716.626796][ T31] ? rcu_is_watching+0x12/0xc0 [ 716.626824][ T31] ? __pfx_watchdog+0x10/0x10 [ 716.626846][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 716.626879][ T31] ? __kthread_parkme+0x19e/0x250 [ 716.626913][ T31] ? __pfx_watchdog+0x10/0x10 [ 716.626936][ T31] kthread+0x3c5/0x780 [ 716.626970][ T31] ? __pfx_kthread+0x10/0x10 [ 716.627002][ T31] ? rcu_is_watching+0x12/0xc0 [ 716.627028][ T31] ? __pfx_kthread+0x10/0x10 [ 716.627062][ T31] ret_from_fork+0x675/0x7d0 [ 716.627096][ T31] ? __pfx_kthread+0x10/0x10 [ 716.627130][ T31] ret_from_fork_asm+0x1a/0x30 [ 716.627181][ T31] [ 716.627190][ T31] Sending NMI from CPU 1 to CPUs 0: [ 716.755775][ C0] NMI backtrace for cpu 0 [ 716.755796][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 716.755824][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 716.755839][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 716.755872][ C0] Code: 67 6f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 74 2c 00 fb f4 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 716.755894][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 716.755913][ C0] RAX: 00000000007baebd RBX: 0000000000000000 RCX: ffffffff8b5db2a9 [ 716.755928][ C0] RDX: 0000000000000000 RSI: ffffffff8da29329 RDI: ffffffff8bf078c0 [ 716.755943][ C0] RBP: fffffbfff1c12f40 R08: 0000000000000001 R09: ffffed1017086655 [ 716.755958][ C0] R10: ffff8880b84332ab R11: 0000000000000001 R12: 0000000000000000 [ 716.755972][ C0] R13: ffffffff8e097a00 R14: ffffffff90824cd0 R15: 0000000000000000 [ 716.755987][ C0] FS: 0000000000000000(0000) GS:ffff888124a0d000(0000) knlGS:0000000000000000 [ 716.756008][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 716.756044][ C0] CR2: 000055f0b38b83d0 CR3: 0000000030fcc000 CR4: 00000000003526f0 [ 716.756059][ C0] Call Trace: [ 716.756068][ C0] [ 716.756076][ C0] default_idle+0x13/0x20 [ 716.756107][ C0] default_idle_call+0x6c/0xb0 [ 716.756137][ C0] do_idle+0x38d/0x500 [ 716.756163][ C0] ? __pfx_do_idle+0x10/0x10 [ 716.756186][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 716.756223][ C0] cpu_startup_entry+0x4f/0x60 [ 716.756247][ C0] rest_init+0x16b/0x2b0 [ 716.756277][ C0] ? acpi_subsystem_init+0x133/0x180 [ 716.756311][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 716.756336][ C0] start_kernel+0x3f6/0x4e0 [ 716.756370][ C0] x86_64_start_reservations+0x18/0x30 [ 716.756393][ C0] x86_64_start_kernel+0x130/0x190 [ 716.756415][ C0] common_startup_64+0x13e/0x148 [ 716.756448][ C0] [ 718.632672][T15329] Bluetooth: hci5: command 0x0406 tx timeout